Description

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Related CPE's

o

lenovo

thinkpad_11e_yoga_gen_6_firmware

Vulnerable

h

lenovo

thinkpad_11e_yoga_gen_6

-

o

lenovo

thinkpad_11e_firmware

Vulnerable

h

lenovo

thinkpad_11e

-

o

lenovo

thinkpad_yoga_11e_3rd_gen_firmware

Vulnerable

h

lenovo

thinkpad_yoga_11e_3rd_gen

-

o

lenovo

thinkpad_yoga_11e_4th_gen_firmware

Vulnerable

h

lenovo

thinkpad_yoga_11e_4th_gen

-

o

lenovo

thinkpad_yoga_11e_5th_gen_firmware

Vulnerable

h

lenovo

thinkpad_yoga_11e_5th_gen

-

o

lenovo

thinkpad_13_2nd_gen_firmware

Vulnerable

h

lenovo

thinkpad_13_2nd_gen

-

o

lenovo

thinkpad_13_firmware

Vulnerable

h

lenovo

thinkpad_13

-

o

lenovo

thinkpad_a275_firmware

Vulnerable

h

lenovo

thinkpad_a275

-

o

lenovo

thinkpad_a285_firmware

Vulnerable

h

lenovo

thinkpad_a285

-

o

lenovo

thinkpad_a475_firmware

Vulnerable

h

lenovo

thinkpad_a475

-

o

lenovo

thinkpad_a485_firmware

Vulnerable

h

lenovo

thinkpad_a485

-

o

lenovo

thinkpad_e14_firmware

Vulnerable

h

lenovo

thinkpad_e14

-

o

lenovo

thinkpad_e15_firmware

Vulnerable

h

lenovo

thinkpad_e15

-

o

lenovo

thinkpad_r14_firmware

Vulnerable

h

lenovo

thinkpad_r14

-

o

lenovo

thinkpad_s3_gen_2_firmware

Vulnerable

h

lenovo

thinkpad_s3_gen_2

-

o

lenovo

thinkpad_e455_firmware

Vulnerable

h

lenovo

thinkpad_e455

-

o

lenovo

thinkpad_e555_firmware

Vulnerable

h

lenovo

thinkpad_e555

-

o

lenovo

thinkpad_e460_firmware

Vulnerable

h

lenovo

thinkpad_e460

-

o

lenovo

thinkpad_e560_firmware

Vulnerable

h

lenovo

thinkpad_e560

-

o

lenovo

thinkpad_e465_firmware

Vulnerable

h

lenovo

thinkpad_e465

-

o

lenovo

thinkpad_e565_firmware

Vulnerable

h

lenovo

thinkpad_e565

-

o

lenovo

thinkpad_e470_firmware

Vulnerable

h

lenovo

thinkpad_e470

-

o

lenovo

thinkpad_e570_firmware

Vulnerable

h

lenovo

thinkpad_e570

-

o

lenovo

thinkpad_e475_firmware

Vulnerable

h

lenovo

thinkpad_e475

-

o

lenovo

thinkpad_e575_firmware

Vulnerable

h

lenovo

thinkpad_e575

-

o

lenovo

thinkpad_e480_firmware

Vulnerable

h

lenovo

thinkpad_e480

-

o

lenovo

thinkpad_e580_firmware

Vulnerable

h

lenovo

thinkpad_e580

-

o

lenovo

thinkpad_e485_firmware

Vulnerable

h

lenovo

thinkpad_e485

-

o

lenovo

thinkpad_e585_firmware

Vulnerable

h

lenovo

thinkpad_e585

-

o

lenovo

thinkpad_e490s_firmware

Vulnerable

h

lenovo

thinkpad_e490s

-

o

lenovo

thinkpad_s3_firmware

Vulnerable

h

lenovo

thinkpad_s3

-

o

lenovo

thinkpad_e490_firmware

Vulnerable

h

lenovo

thinkpad_e490

-

o

lenovo

thinkpad_e590_firmware

Vulnerable

h

lenovo

thinkpad_e590

-

o

lenovo

thinkpad_r490_firmware

Vulnerable

h

lenovo

thinkpad_r490

-

o

lenovo

thinkpad_r590_firmware

Vulnerable

h

lenovo

thinkpad_r590

-

o

lenovo

thinkpad_l13_firmware

Vulnerable

h

lenovo

thinkpad_l13

-

o

lenovo

thinkpad_l1415_firmware

Vulnerable

h

lenovo

thinkpad_l1415

-

o

lenovo

thinkpad_l380_firmware

Vulnerable

h

lenovo

thinkpad_l380

-

o

lenovo

thinkpad_s3_3rd_gen_firmware

Vulnerable

h

lenovo

thinkpad_s3_3rd_gen

-

o

lenovo

thinkpad_l380_yoga_firmware

Vulnerable

h

lenovo

thinkpad_l380_yoga

-

o

lenovo

thinkpad_s2_yoga_3rd_gen_firmware

Vulnerable

h

lenovo

thinkpad_s2_yoga_3rd_gen

-

o

lenovo

thinkpad_l390_yoga_firmware

Vulnerable

h

lenovo

thinkpad_l390_yoga

-

o

lenovo

thinkpad_s2_yoga_4th_gen_firmware

Vulnerable

h

lenovo

thinkpad_s2_yoga_4th_gen

-

o

lenovo

thinkpad_l460_firmware

Vulnerable

h

lenovo

thinkpad_l460

-

o

lenovo

thinkpad_l470_firmware

Vulnerable

h

lenovo

thinkpad_l470

-

o

lenovo

thinkpad_l480_firmware

Vulnerable

h

lenovo

thinkpad_l480

-

o

lenovo

thinkpad_l580_firmware

Vulnerable

h

lenovo

thinkpad_l580

-

o

lenovo

thinkpad_l490_firmware

Vulnerable

h

lenovo

thinkpad_l490

-

o

lenovo

thinkpad_l590_firmware

Vulnerable

h

lenovo

thinkpad_l590

-

o

lenovo

thinkpad_l560_firmware

Vulnerable

h

lenovo

thinkpad_l560

-

o

lenovo

thinkpad_l570_firmware

Vulnerable

h

lenovo

thinkpad_l570

-

o

lenovo

thinkpad_p1_firmware

Vulnerable

h

lenovo

thinkpad_p1

-

o

lenovo

thinkpad_p43s_firmware

Vulnerable

h

lenovo

thinkpad_p43s

-

o

lenovo

thinkpad_p50_firmware

Vulnerable

h

lenovo

thinkpad_p50

-

o

lenovo

thinkpad_p50s_firmware

Vulnerable

h

lenovo

thinkpad_p50s

-

o

lenovo

thinkpad_p51_firmware

Vulnerable

h

lenovo

thinkpad_p51

-

o

lenovo

thinkpad_p51s_firmware

Vulnerable

h

lenovo

thinkpad_p51s

-

o

lenovo

thinkpad_p52_firmware

Vulnerable

h

lenovo

thinkpad_p52

-

o

lenovo

thinkpad_p52s_firmware

Vulnerable

h

lenovo

thinkpad_p52s

-

o

lenovo

thinkpad_p53_firmware

Vulnerable

h

lenovo

thinkpad_p53

-

o

lenovo

thinkpad_p53s_firmware

Vulnerable

h

lenovo

thinkpad_p53s

-

o

lenovo

thinkpad_p70_firmware

Vulnerable

h

lenovo

thinkpad_p70

-

o

lenovo

thinkpad_p71_firmware

Vulnerable

h

lenovo

thinkpad_p71

-

o

lenovo

thinkpad_p72_firmware

Vulnerable

h

lenovo

thinkpad_p72

-

o

lenovo

thinkpad_p73_firmware

Vulnerable

h

lenovo

thinkpad_p73

-

o

lenovo

thinkpad_s5_2nd_gen_firmware

Vulnerable

h

lenovo

thinkpad_s5_2nd_gen

-

o

lenovo

thinkpad_s5_firmware

Vulnerable

h

lenovo

thinkpad_s5

-

o

lenovo

thinkpad_e560p_firmware

Vulnerable

h

lenovo

thinkpad_e560p

-

o

lenovo

thinkpad_t25_firmware

Vulnerable

h

lenovo

thinkpad_t25

-

o

lenovo

thinkpad_t460_firmware

Vulnerable

h

lenovo

thinkpad_t460

-

o

lenovo

thinkpad_t460p_firmware

Vulnerable

h

lenovo

thinkpad_t460p

-

o

lenovo

thinkpad_t460s_firmware

Vulnerable

h

lenovo

thinkpad_t460s

-

o

lenovo

thinkpad_t470_firmware

Vulnerable

h

lenovo

thinkpad_t470

-

o

lenovo

thinkpad_t470p_firmware

Vulnerable

h

lenovo

thinkpad_t470p

-

o

lenovo

thinkpad_t470s_firmware

Vulnerable

h

lenovo

thinkpad_t470s

-

o

lenovo

thinkpad_t480_firmware

Vulnerable

h

lenovo

thinkpad_t480

-

o

lenovo

thinkpad_t480s_firmware

Vulnerable

h

lenovo

thinkpad_t480s

-

o

lenovo

thinkpad_t490_firmware

Vulnerable

h

lenovo

thinkpad_t490

-

o

lenovo

thinkpad_t490s_firmware

Vulnerable

h

lenovo

thinkpad_t490s

-

o

lenovo

thinkpad_t560_firmware

Vulnerable

h

lenovo

thinkpad_t560

-

o

lenovo

thinkpad_t570_firmware

Vulnerable

h

lenovo

thinkpad_t570

-

o

lenovo

thinkpad_t580_firmware

Vulnerable

h

lenovo

thinkpad_t580

-

o

lenovo

thinkpad_t590_firmware

Vulnerable

h

lenovo

thinkpad_t590

-

o

lenovo

thinkpad_x1_carbon_firmware

Vulnerable

h

lenovo

thinkpad_x1_carbon

-

o

lenovo

thinkpad_x1_yoga_firmware

2

h

lenovo

thinkpad_x1_yoga

2

o

lenovo

thinkpad_x1_extreme_firmware

Vulnerable

h

lenovo

thinkpad_x1_extreme

-

o

lenovo

thinkpad_x1_tablet_firmware

Vulnerable

h

lenovo

thinkpad_x1_tablet

-

o

lenovo

thinkpad_x260_firmware

Vulnerable

h

lenovo

thinkpad_x260

-

o

lenovo

thinkpad_x270_firmware

Vulnerable

h

lenovo

thinkpad_x270

-

o

lenovo

thinkpad_x280_firmware

Vulnerable

h

lenovo

thinkpad_x280

-

o

lenovo

thinkpad_x380_yoga_firmware

Vulnerable

h

lenovo

thinkpad_x380_yoga

-

o

lenovo

thinkpad_x390_firmware

Vulnerable

h

lenovo

thinkpad_x390

-

o

lenovo

thinkpad_x390_yoga_firmware

Vulnerable

h

lenovo

thinkpad_x390_yoga

-

o

lenovo

thinkpad_x395_firmware

Vulnerable

h

lenovo

thinkpad_x395

-

o

lenovo

thinkpad_yoga_260_firmware

Vulnerable

h

lenovo

thinkpad_yoga_260

-

o

lenovo

thinkpad_s1_firmware

Vulnerable

h

lenovo

thinkpad_s1

-

o

lenovo

thinkpad_yoga_370_firmware

Vulnerable

h

lenovo

thinkpad_yoga_370

-

o

lenovo

thinkpad_s1_3rd_firmware

Vulnerable

h

lenovo

thinkpad_s1_3rd

-

o

lenovo

thinkpad_t495_firmware

Vulnerable

h

lenovo

thinkpad_t495

-

o

lenovo

thinkpad_t495s_firmware

Vulnerable

h

lenovo

thinkpad_t495s

-

References

https://support.lenovo.com/us/en/product_security/LEN-30042

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-269

[email protected]

Secondary
CWE-489

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2020-06-09T20:15:22.117

4 years ago

Last modified

2020-06-17T15:14:07.177

4 years ago