PT-2020-20102
CVE-2020-8335
·
Published
2020-09-01
·
Updated
2020-09-10
Description by
CVSS 3.1
6.8
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Lenovo ThinkPad A285 versions up to r0xuj70w
Lenovo ThinkPad A485 versions up to r0wuj65w
Lenovo ThinkPad T495 versions up to r12uj55w
Lenovo ThinkPad T495s/X395 versions up to r13uj47w
Description
The BIOS tamper detection mechanism in certain Lenovo ThinkPad models was not triggered when the emergency-reset button is pressed, potentially allowing for unauthorized access.
Recommendations
For Lenovo ThinkPad A285 versions up to r0xuj70w, update the BIOS to a version later than r0xuj70w.
For Lenovo ThinkPad A485 versions up to r0wuj65w, update the BIOS to a version later than r0wuj65w.
For Lenovo ThinkPad T495 versions up to r12uj55w, update the BIOS to a version later than r12uj55w.
For Lenovo ThinkPad T495s/X395 versions up to r13uj47w, update the BIOS to a version later than r13uj47w.
Found an issue in the description? Have something to add? Feel free to write us 👾