CVE-2020-8353

EUVD-2020-29220 · Published Nov 11, 2020

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

Technologies

Lenovo Thinkcentre M80T FirmwareLenovo Thinkstation P340S FirmwareLenovo Thinkstation P330 Tiny FirmwareLenovo Thinkcentre M920ZLenovo Thinkstation P340TLenovo Thinkstation P330TLenovo Thinkcentre M920T FirmwareLenovo Thinkcentre M920SLenovo Thinkcentre M920TLenovo Thinkstation P340SLenovo Thinkstation P330S FirmwareLenovo Thinkcentre M910Z FirmwareLenovo Thinkstation P330 TinyLenovo Thinkstation P330SLenovo Thinkcentre M90SLenovo Thinkcentre M80SLenovo Thinkcentre M920Z FirmwareLenovo Thinkcentre M90TLenovo Thinkcentre M920QLenovo Thinkcentre M90S FirmwareLenovo Thinkcentre M920S FirmwareLenovo Thinkstation P330T FirmwareLenovo Thinkcentre M80S FirmwareLenovo Thinkcentre M90T FirmwareLenovo Thinkcentre M910ZLenovo Thinkstation P340T FirmwareLenovo Thinkcentre M80TLenovo Thinkcentre M920Q Firmware

Weaknesses

CWE-16

CVSS scores

v3.16.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
v2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://support.lenovo.com/us/en/product_security/LEN-44725

Potentially impacted assets

See if this affects your attack surface