CVE Vulnerabilities

CVE-2020-8320

Active Debug Code

Published: Jun 09, 2020 | Modified: Nov 21, 2024
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Weakness

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

Affected Software

Name Vendor Start Version End Version
Thinkpad_11e_yoga_gen_6_firmware Lenovo * 2020-07-10 (excluding)

Potential Mitigations

References