Thinkcentre E73 Firmware
CVE-2020-8352
LOW
Severity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
1DescriptionNVD
In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.
AnalysisAI
In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-358. In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes. Affected products include: Lenovo Thinkcentre E73 Firmware, Lenovo Thinkcentre M73 Firmware, Lenovo Qitian 4500 Firmware, Lenovo Qitian B4550 Firmware, Lenovo Qitian M4550 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Thinkcentre E73 Firmware
View allThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p,
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStatio
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends,
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficie
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in ru
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today