1. Home
  2. CVE Database
  3. CVE-2020-8353
MEDIUM · 6.7

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative us...

Vulnerability Description

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
LenovoThinkcentre M80T Firmware< 2020-08-10
LenovoThinkcentre M80T-
LenovoThinkcentre M80S Firmware< 2020-08-10
LenovoThinkcentre M80S-
LenovoThinkcentre M90T Firmware< 2020-08-10
LenovoThinkcentre M90T-
LenovoThinkcentre M90S Firmware< 2020-08-10
LenovoThinkcentre M90S-
LenovoThinkcentre M910Z Firmware< 2020-08-10
LenovoThinkcentre M910Z-
LenovoThinkcentre M920S Firmware< 2020-08-10
LenovoThinkcentre M920S-
LenovoThinkcentre M920T Firmware< 2020-08-10
LenovoThinkcentre M920T-
LenovoThinkcentre M920Q Firmware< 2020-08-10
LenovoThinkcentre M920Q-
LenovoThinkcentre M920Z Firmware< 2020-08-10
LenovoThinkcentre M920Z-
LenovoThinkstation P330T Firmware< 2020-08-10
LenovoThinkstation P330T-

Related Weaknesses (CWE)

CWE-16

References

FAQ

What is CVE-2020-8353?

CVE-2020-8353 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative us...

How severe is CVE-2020-8353?

CVE-2020-8353 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8353?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Thinkcentre M80T Firmware, Lenovo Thinkcentre M80T, Lenovo Thinkcentre M80S Firmware, Lenovo Thinkcentre M80S, Lenovo Thinkcentre M90T Firmware.