Skip to main content

Thinkpad T495 Drift Firmware

2 CVEs product

Monthly

CVE-2020-8341 LOW Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Information Disclosure Thinkpad T490 20Nx Firmware Thinkpad T490 20Qx Firmware Thinkpad T490 20Rx Firmware +7
NVD
CVSS 3.1
2.4
EPSS
0.3%
CVE-2020-8335 MEDIUM This Month

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Authentication Bypass Thinkpad A275 Firmware Thinkpad A285 Firmware Thinkpad A475 Firmware +5
NVD
CVSS 3.1
6.8
EPSS
0.3%
EPSS 0% CVSS 2.4
LOW Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Information Disclosure Thinkpad T490 20Nx Firmware +9
NVD
EPSS 0% CVSS 6.8
MEDIUM This Month

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Authentication Bypass Thinkpad A275 Firmware +7
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy