20A8 Firmware
1 CVEs
product
Monthly
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
20F1 Firmware
20F2 Firmware
20Jq Firmware
20Jr Firmware
+144
NVD
CVSS 3.1
6.8
EPSS
0.3%
EPSS 0%
CVSS 6.8
MEDIUM
This Month
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
20F1 Firmware
20F2 Firmware
+146
NVD