VulnerabilityModified
CVE-2020-8353
This could allow an administrative user with local access to configure Intel AMT.
MEDIUM 6.7EPSS 0.55%
Does this matter?
Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.
Description
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.55% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-16
- Affected
- lenovo/thinkcentre m80t firmware · lenovo/thinkcentre m80s firmware · lenovo/thinkcentre m90t firmware · lenovo/thinkcentre m90s firmware · lenovo/thinkcentre m910z firmware · lenovo/thinkcentre m920s firmware · lenovo/thinkcentre m920t firmware · lenovo/thinkcentre m920q firmware · lenovo/thinkcentre m920z firmware · lenovo/thinkstation p330t firmware · lenovo/thinkstation p330s firmware · lenovo/thinkstation p330 tiny firmware · lenovo/thinkstation p340t firmware · lenovo/thinkstation p340s firmware
- Source
- psirt@lenovo.com
References
- https://support.lenovo.com/us/en/product_security/LEN-44725Exploit, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-44725Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.