PT-2020-20120 · Intel+1 · Intel Amt+2

Published 2020-11-11 · Updated 2020-11-30 · CVE-2020-8353

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Desktop and Workstation systems (affected versions not specified)

Description The issue concerns Lenovo Desktop and Workstation systems that were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled prior to August 10, 2020. This could allow an administrative user with local access to configure Intel AMT.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2020-8353

Affected Products

Intel Amt

Lenovo Desktop

Lenovo Workstation

References · 5

• 🔥 https://support.lenovo.com/us/en/product_security/LEN-44725 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8353 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8353 · Vendor Advisory
• https://t.me/cibsecurity/16176 · Telegram Post
• https://t.me/cvenotify/5553 · Telegram Post