PT-2020-20101 · Lenovo · Lenovo Thinkpad T495+5

Published 2020-06-09 · Updated 2021-07-21 · CVE-2020-8334

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 (affected versions not specified)

Description The BIOS tamper detection mechanism in the affected Lenovo ThinkPad devices was not triggered, which may allow for unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2020-8334

Affected Products

Lenovo Thinkpad A275

Lenovo Thinkpad A285

Lenovo Thinkpad A475

Lenovo Thinkpad A485

Lenovo Thinkpad T495

Lenovo Thinkpad X395

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2020-8334 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-30042 · Vendor Advisory