PT-2020-20117 · Lenovo · Lenovo Thinkpad Stack Wireless Router

Published 2020-10-14 · Updated 2020-10-20 · CVE-2020-8350

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad Stack Wireless Router version 1.1.3.4

Description An authentication bypass issue was reported that could allow escalation of privilege.

Recommendations For version 1.1.3.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-8350

Affected Products

Lenovo Thinkpad Stack Wireless Router

References · 3

• https://support.lenovo.com/us/en/product_security/LEN-48228 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8350 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8350 · Vendor Advisory