Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-8336 Details

Description

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:6.4 MEDIUMVector:CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.lenovo.com/us/en/product_security/LEN-30042	CVE	Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-30042	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
lenovo thinkpad e14 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_e14_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad e14	All versions
CPE cpe:2.3:h:lenovo:thinkpad_e14:-:::::::* Remediation No remediation found in references.
lenovo thinkpad e15 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_e15_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad e15	All versions
CPE cpe:2.3:h:lenovo:thinkpad_e15:-:::::::* Remediation No remediation found in references.
lenovo thinkpad r14 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_r14_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad r14	All versions
CPE cpe:2.3:h:lenovo:thinkpad_r14:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s3 gen 2 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_s3_gen_2_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad s3 gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkpad e490s firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_e490s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad e490s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_e490s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s3 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_s3_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad s3	All versions
CPE cpe:2.3:h:lenovo:thinkpad_s3:-:::::::* Remediation No remediation found in references.
lenovo thinkpad e490 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_e490_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad e490	All versions
CPE cpe:2.3:h:lenovo:thinkpad_e490:-:::::::* Remediation No remediation found in references.
lenovo thinkpad e590 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_e590_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad e590	All versions
CPE cpe:2.3:h:lenovo:thinkpad_e590:-:::::::* Remediation No remediation found in references.
lenovo thinkpad r490 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_r490_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad r490	All versions
CPE cpe:2.3:h:lenovo:thinkpad_r490:-:::::::* Remediation No remediation found in references.
lenovo thinkpad r590 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_r590_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad r590	All versions
CPE cpe:2.3:h:lenovo:thinkpad_r590:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l13 1st gen firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_l13_1st_gen_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l13 1st gen	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l13_1st_gen:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l1415 gen 1 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_l1415_gen_1_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l1415 gen 1	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l1415_gen_1:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l390 yoga firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_l390_yoga_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l390 yoga	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s2 yoga 4th gen firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_s2_yoga_4th_gen_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad s2 yoga 4th gen	All versions
CPE cpe:2.3:h:lenovo:thinkpad_s2_yoga_4th_gen:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l490 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_l490_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l490	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l490:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l590 firmware	< 2020-07-10
CPE cpe:2.3:o:lenovo:thinkpad_l590_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l590	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l590:-:::::::* Remediation No remediation found in references.
lenovo thinkpad p1 (20mx) firmware	< n2eet47w
CPE cpe:2.3:o:lenovo:thinkpad_p1_(20mx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p1 (20mx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p1_(20mx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p1 (20qx) firmware	< n2oet44w
CPE cpe:2.3:o:lenovo:thinkpad_p1_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p1 (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p1_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p43s (20rx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_p43s_(20rx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p43s (20rx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p43s_(20rx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p52 (20mx) firmware	< n2cet51w-1.34
CPE cpe:2.3:o:lenovo:thinkpad_p52_(20mx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p52 (20mx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p52_(20mx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p53 (20qx) firmware	< n2net37w
CPE cpe:2.3:o:lenovo:thinkpad_p53_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p53 (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p53_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p53s (20nx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_p53s_(20nx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p53s (20nx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p53s_(20nx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p72 (20mx) firmware	< n2cet51w
CPE cpe:2.3:o:lenovo:thinkpad_p72_(20mx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p72 (20mx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p72_(20mx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad p73 (20qx) firmware	< n2net37w
CPE cpe:2.3:o:lenovo:thinkpad_p73_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p73 (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p73_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad t490 (20nx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_t490_(20nx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t490 (20nx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t490_(20nx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad t490 (20qx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_t490_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t490 (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t490_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad t490 (20rx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_t490_(20rx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t490 (20rx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t490_(20rx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad t490s (20nx) firmware	< n2jet87w
CPE cpe:2.3:o:lenovo:thinkpad_t490s_(20nx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t490s (20nx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t490s_(20nx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad t590 (20nx) firmware	< n2iet88w
CPE cpe:2.3:o:lenovo:thinkpad_t590_(20nx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t590 (20nx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t590_(20nx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon (20qx) firmware	< n2het47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon (20rx) firmware	< n2het47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_(20rx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon (20rx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_(20rx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 extreme (20mx) firmware	< n2eet47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_extreme_(20mx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 extreme (20mx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_extreme_(20mx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 extreme (20qx) firmware	< n2oet44w
CPE cpe:2.3:o:lenovo:thinkpad_x1_extreme_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 extreme (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_extreme_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga (20qx) firmware	< n2het47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 yoga (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga (20sx) firmware	< n2het47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_(20sx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 yoga (20sx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga_(20sx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x390 (20qx) firmware	< n2jet87w
CPE cpe:2.3:o:lenovo:thinkpad_x390_(20qx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x390 (20qx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x390_(20qx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x390 (20sx) firmware	< n2set18w
CPE cpe:2.3:o:lenovo:thinkpad_x390_(20sx)_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x390 (20sx)	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x390_(20sx):-:::::::* Remediation No remediation found in references.
lenovo thinkpad x390 yoga firmware	< n2let74w
CPE cpe:2.3:o:lenovo:thinkpad_x390_yoga_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x390 yoga	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jun 22, 2020	Initial Analysis	[email protected]

CVE-2020-8336 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation