CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@lenovo.com

Published

2020-06-09

Last modified

2024-09-16

Affected products

• Bios (Lenovo)
• Thinkpad E14 Firmware (Lenovo)
• Thinkpad E15 Firmware (Lenovo)
• Thinkpad E490 Firmware (Lenovo)
• Thinkpad E490s Firmware (Lenovo)
• Thinkpad E590 Firmware (Lenovo)
• Thinkpad L13 1st Gen Firmware (Lenovo)
• Thinkpad L1415 Gen 1 Firmware (Lenovo)
• Thinkpad L390 Yoga Firmware (Lenovo)
• Thinkpad L490 Firmware (Lenovo)
• Thinkpad L590 Firmware (Lenovo)
• Thinkpad P1 (20mx) Firmware (Lenovo)
• Thinkpad P1 (20qx) Firmware (Lenovo)
• Thinkpad P43s (20rx) Firmware (Lenovo)
• Thinkpad P52 (20mx) Firmware (Lenovo)
• Thinkpad P53 (20qx) Firmware (Lenovo)
• Thinkpad P53s (20nx) Firmware (Lenovo)
• Thinkpad P72 (20mx) Firmware (Lenovo)
• Thinkpad P73 (20qx) Firmware (Lenovo)
• Thinkpad R14 Firmware (Lenovo)
• Thinkpad R490 Firmware (Lenovo)
• Thinkpad R590 Firmware (Lenovo)
• Thinkpad S2 Yoga 4th Gen Firmware (Lenovo)
• Thinkpad S3 Firmware (Lenovo)
• Thinkpad S3 Gen 2 Firmware (Lenovo)
• Thinkpad T490 (20nx) Firmware (Lenovo)
• Thinkpad T490 (20qx) Firmware (Lenovo)
• Thinkpad T490 (20rx) Firmware (Lenovo)
• Thinkpad T490s (20nx) Firmware (Lenovo)
• Thinkpad T590 (20nx) Firmware (Lenovo)
• Thinkpad X1 Carbon (20qx) Firmware (Lenovo)
• Thinkpad X1 Carbon (20rx) Firmware (Lenovo)
• Thinkpad X1 Extreme (20mx) Firmware (Lenovo)
• Thinkpad X1 Extreme (20qx) Firmware (Lenovo)
• Thinkpad X1 Yoga (20qx) Firmware (Lenovo)
• Thinkpad X1 Yoga (20sx) Firmware (Lenovo)
• Thinkpad X390 (20qx) Firmware (Lenovo)
• Thinkpad X390 (20sx) Firmware (Lenovo)
• Thinkpad X390 Yoga Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-30042