CVE-2020-8352

Low

Description

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.

SeverityLow
CVSS2.4
Exploit probability—
ProductLenovo Thinkcentre E73 Firmware
PublishedNov 11, 2020
First seenNov 11, 2020
Weakness typeCWE-358CWE-358

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
lenovo thinkcentre_e73_firmwareNo range specified—
lenovo thinkcentre_m73_firmwareNo range specified—
lenovo qitian_4500_firmwareNo range specified—
lenovo qitian_b4550_firmwareNo range specified—
lenovo qitian_m4550_firmwareNo range specified—
lenovo thinkcentre_m4500k_firmwareNo range specified—
lenovo thinkcentre_m4500t_firmwareNo range specified—
lenovo thinkcentre_m4500s_firmwareNo range specified—
lenovo yangtian_afh81_firmwareNo range specified—
lenovo yangtian_mc_h81_firmwareNo range specified—
lenovo yangtian_mf_firmwareNo range specified—
lenovo yangtian_wf_h81_pci_firmwareNo range specified—
lenovo yangtian_ms_firmwareNo range specified—
lenovo yangtian_ws_h81_firmwareNo range specified—
lenovo yangtian_tc_firmwareNo range specified—
lenovo yangtian_wcc_h81_pci_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.