Thinkpad X1 Carbon 20Bx Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8335 MEDIUM This Month

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Authentication Bypass Thinkpad A275 Firmware Thinkpad A285 Firmware Thinkpad A475 Firmware +5

NVD

CVSS 3.1

6.8

EPSS

0.3%

CVE-2020-8323 MEDIUM This Month

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Lenovo 330 14Ast Firmware 330 15Ast Firmware 330 17Ast Firmware +169

NVD

CVSS 3.1

6.7

EPSS

0.3%

CVE-2020-8335

EPSS 0% CVSS 6.8

MEDIUM This Month

Lenovo Authentication Bypass Thinkpad A275 Firmware +7

NVD

CVE-2020-8323

EPSS 0% CVSS 6.7

MEDIUM This Month

RCE Lenovo 330 14Ast Firmware +171

NVD