CVE-2020-8320 - An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege

Back Back to CVE browser

MEDIUM

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege

Published Jun 9, 2020

6.8

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Affected products

Vendor Lenovo Product BIOS Default
n/a
- Version
  various
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

BIOS

n/a

Version	Status	Constraints
various	affected	-

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042.

Weaknesses (2)

CWE-269

Improper Privilege Management

CWE-489

References (1)

https://support.lenovo.com/us/en/product_security/LEN-30042
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://support.lenovo.com/us/en/product_security/LEN-30042		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Jun 9, 2020

Updated Sep 16, 2024

Reserved Jan 28, 2020

Link CVE-2020-8320

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8320

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8320