CVE-2020-8336

Published: Jun 9, 2020Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Affected (38)

Lenovo

38 products

Thinkpad E14 Firmware

Thinkpad E15 Firmware

Thinkpad R14 Firmware

Thinkpad S3 Gen 2 Firmware

Thinkpad E490s Firmware

Thinkpad S3 Firmware

Thinkpad E490 Firmware

Thinkpad E590 Firmware

Thinkpad R490 Firmware

Thinkpad R590 Firmware

Thinkpad L13 1st Gen Firmware

Thinkpad L1415 Gen 1 Firmware

Thinkpad L390 Yoga Firmware

Thinkpad S2 Yoga 4th Gen Firmware

Thinkpad L490 Firmware

Thinkpad L590 Firmware

Thinkpad P1 (20mx) Firmware

Thinkpad P1 (20qx) Firmware

Thinkpad P43s (20rx) Firmware

Thinkpad P52 (20mx) Firmware

Thinkpad P53 (20qx) Firmware

Thinkpad P53s (20nx) Firmware

Thinkpad P72 (20mx) Firmware

Thinkpad P73 (20qx) Firmware

Thinkpad T490 (20nx) Firmware

Thinkpad T490 (20qx) Firmware

Thinkpad T490 (20rx) Firmware

Thinkpad T490s (20nx) Firmware

Thinkpad T590 (20nx) Firmware

Thinkpad X1 Carbon (20qx) Firmware

Thinkpad X1 Carbon (20rx) Firmware

Thinkpad X1 Extreme (20mx) Firmware

Thinkpad X1 Extreme (20qx) Firmware

Thinkpad X1 Yoga (20qx) Firmware

Thinkpad X1 Yoga (20sx) Firmware

Thinkpad X390 (20qx) Firmware

Thinkpad X390 (20sx) Firmware

Thinkpad X390 Yoga Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E14 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad E14	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E15 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad E15	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad R14 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad R14	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S3 Gen 2 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad S3 Gen 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E490s Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad E490s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S3 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad S3	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E490 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad E490	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E590 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad E590	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad R490 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad R490	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad R590 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad R590	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 1st Gen Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad L13 1st Gen	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L1415 Gen 1 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad L1415 Gen 1	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L390 Yoga Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad L390 Yoga	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S2 Yoga 4th Gen Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad S2 Yoga 4th Gen	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L490 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad L490	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L590 Firmware	Before 2020-07-10

Running on/with	Platform Versions
Lenovo Thinkpad L590	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 (20mx) Firmware	Before n2eet47w

Running on/with	Platform Versions
Lenovo Thinkpad P1 (20mx)	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 (20qx) Firmware	Before n2oet44w

Running on/with	Platform Versions
Lenovo Thinkpad P1 (20qx)	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P43s (20rx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad P43s (20rx)	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P52 (20mx) Firmware	Before n2cet51w-1.34

Running on/with	Platform Versions
Lenovo Thinkpad P52 (20mx)	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P53 (20qx) Firmware	Before n2net37w

Running on/with	Platform Versions
Lenovo Thinkpad P53 (20qx)	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P53s (20nx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad P53s (20nx)	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P72 (20mx) Firmware	Before n2cet51w

Running on/with	Platform Versions
Lenovo Thinkpad P72 (20mx)	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P73 (20qx) Firmware	Before n2net37w

Running on/with	Platform Versions
Lenovo Thinkpad P73 (20qx)	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490 (20nx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad T490 (20nx)	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490 (20qx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad T490 (20qx)	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490 (20rx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad T490 (20rx)	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490s (20nx) Firmware	Before n2jet87w

Running on/with	Platform Versions
Lenovo Thinkpad T490s (20nx)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T590 (20nx) Firmware	Before n2iet88w

Running on/with	Platform Versions
Lenovo Thinkpad T590 (20nx)	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon (20qx) Firmware	Before n2het47w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon (20qx)	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon (20rx) Firmware	Before n2het47w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon (20rx)	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme (20mx) Firmware	Before n2eet47w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme (20mx)	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme (20qx) Firmware	Before n2oet44w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme (20qx)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga (20qx) Firmware	Before n2het47w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga (20qx)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga (20sx) Firmware	Before n2het47w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga (20sx)	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 (20qx) Firmware	Before n2jet87w

Running on/with	Platform Versions
Lenovo Thinkpad X390 (20qx)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 (20sx) Firmware	Before n2set18w

Running on/with	Platform Versions
Lenovo Thinkpad X390 (20sx)	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 Yoga Firmware	Before n2let74w

Running on/with	Platform Versions
Lenovo Thinkpad X390 Yoga	All versions

References (2)

https://support.lenovo.com/us/en/product_security/LEN-30042

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-30042

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.