CVE-2020-8336 - Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash

Back Back to CVE browser

MEDIUM

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash

Published Jun 9, 2020

6.8

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Affected products

Vendor Lenovo Product BIOS Default
n/a
- Version
  various
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

BIOS

n/a

Version	Status	Constraints
various	affected	-

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29203
Advisory
https://support.lenovo.com/us/en/product_security/LEN-30042
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29203		Advisory
https://support.lenovo.com/us/en/product_security/LEN-30042		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Jun 9, 2020

Updated Sep 16, 2024

Reserved Jan 28, 2020

Link CVE-2020-8336

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8336

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8336

ENISA EUVD

Assigner lenovo

Published Jun 9, 2020

Updated Sep 16, 2024

Exploited since n/a

Link EUVD-2020-29203

EUVD-2020-29203