CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2020-11-11

Last modified

2024-08-04

Weaknesses

CWE-16

Affected products

• Desktop And Workstation Systems (Lenovo)
• Thinkcentre M80s Firmware (Lenovo)
• Thinkcentre M80t Firmware (Lenovo)
• Thinkcentre M90s Firmware (Lenovo)
• Thinkcentre M90t Firmware (Lenovo)
• Thinkcentre M910z Firmware (Lenovo)
• Thinkcentre M920q Firmware (Lenovo)
• Thinkcentre M920s Firmware (Lenovo)
• Thinkcentre M920t Firmware (Lenovo)
• Thinkcentre M920z Firmware (Lenovo)
• Thinkstation P330 Tiny Firmware (Lenovo)
• Thinkstation P330s Firmware (Lenovo)
• Thinkstation P330t Firmware (Lenovo)
• Thinkstation P340s Firmware (Lenovo)
• Thinkstation P340t Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-44725