CVE Feed

    Dashboard / CVE / CVE-2020-8336

    CVE-2020-8336

    Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

    Published:Jun 9, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 9, 2020
    EPSS Score:0.00052
    CVSS Score:6.4

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkpad E14
    Vendor
    Lenovo
    Product
    Thinkpad E14 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad E15
    Vendor
    Lenovo
    Product
    Thinkpad E15 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad E490
    Vendor
    Lenovo
    Product
    Thinkpad E490 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad E490s
    Vendor
    Lenovo
    Product
    Thinkpad E490s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad E590
    Vendor
    Lenovo
    Product
    Thinkpad E590 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad L13 1st Gen
    Vendor
    Lenovo
    Product
    Thinkpad L13 1st Gen Firmware
    Vendor
    Lenovo
    Product
    Thinkpad L1415 Gen 1
    Vendor
    Lenovo
    Product
    Thinkpad L1415 Gen 1 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad L390 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad L390 Yoga Firmware
    Vendor
    Lenovo
    Product
    Thinkpad L490
    Vendor
    Lenovo
    Product
    Thinkpad L490 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad L590
    Vendor
    Lenovo
    Product
    Thinkpad L590 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P1 \(20mx\)
    Vendor
    Lenovo
    Product
    Thinkpad P1 \(20mx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P1 \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad P1 \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P43s \(20rx\)
    Vendor
    Lenovo
    Product
    Thinkpad P43s \(20rx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P52 \(20mx\)
    Vendor
    Lenovo
    Product
    Thinkpad P52 \(20mx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P53 \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad P53 \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P53s \(20nx\)
    Vendor
    Lenovo
    Product
    Thinkpad P53s \(20nx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P72 \(20mx\)
    Vendor
    Lenovo
    Product
    Thinkpad P72 \(20mx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P73 \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad P73 \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad R14
    Vendor
    Lenovo
    Product
    Thinkpad R14 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad R490
    Vendor
    Lenovo
    Product
    Thinkpad R490 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad R590
    Vendor
    Lenovo
    Product
    Thinkpad R590 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad S2 Yoga 4th Gen
    Vendor
    Lenovo
    Product
    Thinkpad S2 Yoga 4th Gen Firmware
    Vendor
    Lenovo
    Product
    Thinkpad S3
    Vendor
    Lenovo
    Product
    Thinkpad S3 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad S3 Gen 2
    Vendor
    Lenovo
    Product
    Thinkpad S3 Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20nx\)
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20nx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20rx\)
    Vendor
    Lenovo
    Product
    Thinkpad T490 \(20rx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T490s \(20nx\)
    Vendor
    Lenovo
    Product
    Thinkpad T490s \(20nx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T590 \(20nx\)
    Vendor
    Lenovo
    Product
    Thinkpad T590 \(20nx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon \(20rx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon \(20rx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Extreme \(20mx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Extreme \(20mx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Extreme \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Extreme \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga \(20sx\)
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga \(20sx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X390 \(20qx\)
    Vendor
    Lenovo
    Product
    Thinkpad X390 \(20qx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X390 \(20sx\)
    Vendor
    Lenovo
    Product
    Thinkpad X390 \(20sx\) Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X390 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad X390 Yoga Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-48189 (CVSS 6.7) — An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with …
    CVE-2023-2290 (CVSS 6.4) — A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local acces…
    CVE-2022-40134 (CVSS 4.4) — An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an …
    CVE-2021-3786 (CVSS 4.4) — A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and …
    CVE-2021-3599 (CVSS 6.7) — A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may…
    CVE-2021-3462 (CVSS 5.5) — A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.1…
    CVE-2021-3463 (CVSS 4.2) — A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.…
    CVE-2020-8323 (CVSS 6.4) — A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, T…
    CVE-2020-8320 (CVSS 6.4) — An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.…
    CVE-2019-6192 (CVSS 4.4) — A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 lea…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High