CVE-2020-8334 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.1 MEDIUM	PHYSICAL	LOW	NONE	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
lenovo	CNA	6.1 MEDIUM	PHYSICAL	LOW	NONE	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
lenovo	thinkpad_t495s_firmware	-
lenovo	thinkpad_x395_firmware	-
lenovo	thinkpad_t495_firmware	-
lenovo	thinkpad_a485_firmware	-
lenovo	thinkpad_a285_firmware	-
lenovo	thinkpad_a475_firmware	-
lenovo	thinkpad_a275_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-754 - Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.

References

https://support.lenovo.com/us/en/product_security/LEN-30042

https://support.lenovo.com/us/en/product_security/LEN-30042