CVE-2020-8353
Medium
Description
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Thinkcentre M80t Firmware
PublishedNov 11, 2020
First seenNov 11, 2020
Weakness typeCWE-16CWE-16
How to fix
Update
- lenovo thinkcentre_m80t_firmware2020-08-10 or later
- lenovo thinkcentre_m80s_firmware2020-08-10 or later
- lenovo thinkcentre_m90t_firmware2020-08-10 or later
- lenovo thinkcentre_m90s_firmware2020-08-10 or later
- lenovo thinkcentre_m910z_firmware2020-08-10 or later
- lenovo thinkcentre_m920s_firmware2020-08-10 or later
- lenovo thinkcentre_m920t_firmware2020-08-10 or later
- lenovo thinkcentre_m920q_firmware2020-08-10 or later
- lenovo thinkcentre_m920z_firmware2020-08-10 or later
- lenovo thinkstation_p330t_firmware2020-08-10 or later
- lenovo thinkstation_p330s_firmware2020-08-10 or later
- lenovo thinkstation_p330_tiny_firmware2020-08-10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkcentre_m80t_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m80s_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m90t_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m90s_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m910z_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m920s_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m920t_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m920q_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkcentre_m920z_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkstation_p330t_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkstation_p330s_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkstation_p330_tiny_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkstation_p340t_firmware | v < 2020-08-10 | 2020-08-10 |
| lenovo thinkstation_p340s_firmware | v < 2020-08-10 | 2020-08-10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.