CVE-2020-8334 MEDIUM

CVE-2020-8334

Vendor Lenovo
Product BIOS
Published June 9, 2020
Last update September 17, 2024

CVSS base score

6.1/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access.

Key dates

02Disclosure timeline

June 9, 2020 CVE published
September 17, 2024 Record updated