多款Lenovo产品安全漏洞

CVE编号

CVE-2020-8320

利用情况

暂无

补丁情况

N/A

披露时间

2020-06-10
漏洞描述
在一些ThinkPad型号的BIOS映像中包含一个内部shell，可以允许权限升级。

解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://support.lenovo.com/us/en/product_security/LEN-30042
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 lenovo thinkpad_11e_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_11e_yoga_gen_6_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_13_2nd_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_13_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_a275_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_a285_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_a475_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_a485_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e14_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e15_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e455_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e460_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e465_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e470_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e475_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e480_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e485_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e490s_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e490_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e555_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e560p_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e560_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e565_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e570_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e575_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e580_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e585_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_e590_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l13_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l1415_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l380_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l380_yoga_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l390_yoga_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l460_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l470_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l480_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l490_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l560_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_l570_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l580_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_l590_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_p1_firmware * Up to
(excluding)
n2eet46w
运行在以下环境
系统 lenovo thinkpad_p43s_firmware * Up to
(excluding)
n2iet87w
运行在以下环境
系统 lenovo thinkpad_p50s_firmware * Up to
(excluding)
2020-07-24
运行在以下环境
系统 lenovo thinkpad_p50_firmware * Up to
(excluding)
2020-07-17
运行在以下环境
系统 lenovo thinkpad_p51s_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_p51_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_p52s_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_p52_firmware * Up to
(excluding)
n2cet51w
运行在以下环境
系统 lenovo thinkpad_p53s_firmware * Up to
(excluding)
n2iet87w
运行在以下环境
系统 lenovo thinkpad_p53_firmware * Up to
(excluding)
n2net37w
运行在以下环境
系统 lenovo thinkpad_p70_firmware * Up to
(excluding)
2020-07-17
运行在以下环境
系统 lenovo thinkpad_p71_firmware * Up to
(including)
2020-07-17
运行在以下环境
系统 lenovo thinkpad_p72_firmware * Up to
(excluding)
n2cet51w
运行在以下环境
系统 lenovo thinkpad_p73_firmware * Up to
(excluding)
n2net37w
运行在以下环境
系统 lenovo thinkpad_r14_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_r490_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_r590_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s1_3rd_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s1_firmware * Up to
(excluding)
2020-07-07
运行在以下环境
系统 lenovo thinkpad_s2_yoga_3rd_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s2_yoga_4th_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s3_3rd_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s3_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s3_gen_2_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s5_2nd_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_s5_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t25_firmware * Up to
(excluding)
n1qet87w
运行在以下环境
系统 lenovo thinkpad_t460p_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t460s_firmware * Up to
(excluding)
2020-06-19
运行在以下环境
系统 lenovo thinkpad_t460_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t470p_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t470s_firmware * Up to
(excluding)
n1wet58w
运行在以下环境
系统 lenovo thinkpad_t470_firmware * Up to
(excluding)
n1qet87w
运行在以下环境
系统 lenovo thinkpad_t480s_firmware * Up to
(excluding)
n22et62w
运行在以下环境
系统 lenovo thinkpad_t480_firmware * Up to
(excluding)
n24et56w
运行在以下环境
系统 lenovo thinkpad_t490s_firmware * Up to
(excluding)
n2jet87w
运行在以下环境
系统 lenovo thinkpad_t490_firmware * Up to
(excluding)
n2iet87w
运行在以下环境
系统 lenovo thinkpad_t495s_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t495_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_t560_firmware * Up to
(excluding)
2020-07-24
运行在以下环境
系统 lenovo thinkpad_t570_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_t580_firmware * Up to
(excluding)
2020-07-03
运行在以下环境
系统 lenovo thinkpad_t590_firmware * Up to
(excluding)
n2iet87w
运行在以下环境
系统 lenovo thinkpad_x1_carbon_firmware * Up to
(excluding)
n1met60w
运行在以下环境
系统 lenovo thinkpad_x1_extreme_firmware * Up to
(excluding)
n2oet43w
运行在以下环境
系统 lenovo thinkpad_x1_tablet_firmware * Up to
(excluding)
2020-07-24
运行在以下环境
系统 lenovo thinkpad_x1_yoga_firmware * Up to
(excluding)
2020-07-17
运行在以下环境
系统 lenovo thinkpad_x260_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_x270_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_x280_firmware * Up to
(excluding)
n20et52w
运行在以下环境
系统 lenovo thinkpad_x380_yoga_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_x390_firmware * Up to
(excluding)
2020-07-07
运行在以下环境
系统 lenovo thinkpad_x390_yoga_firmware * Up to
(excluding)
2020-06-24
运行在以下环境
系统 lenovo thinkpad_x395_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_yoga_11e_3rd_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_yoga_11e_4th_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_yoga_11e_5th_gen_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
系统 lenovo thinkpad_yoga_260_firmware * Up to
(excluding)
2020-07-07
运行在以下环境
系统 lenovo thinkpad_yoga_370_firmware * Up to
(excluding)
2020-07-10
运行在以下环境
硬件 lenovo thinkpad_11e - -
运行在以下环境
硬件 lenovo thinkpad_11e_yoga_gen_6 - -
运行在以下环境
硬件 lenovo thinkpad_13 - -
运行在以下环境
硬件 lenovo thinkpad_13_2nd_gen - -
运行在以下环境
硬件 lenovo thinkpad_a275 - -
运行在以下环境
硬件 lenovo thinkpad_a285 - -
运行在以下环境
硬件 lenovo thinkpad_a475 - -
运行在以下环境
硬件 lenovo thinkpad_a485 - -
运行在以下环境
硬件 lenovo thinkpad_e14 - -
运行在以下环境
硬件 lenovo thinkpad_e15 - -
运行在以下环境
硬件 lenovo thinkpad_e455 - -
运行在以下环境
硬件 lenovo thinkpad_e460 - -
运行在以下环境
硬件 lenovo thinkpad_e465 - -
运行在以下环境
硬件 lenovo thinkpad_e470 - -
运行在以下环境
硬件 lenovo thinkpad_e475 - -
运行在以下环境
硬件 lenovo thinkpad_e480 - -
运行在以下环境
硬件 lenovo thinkpad_e485 - -
运行在以下环境
硬件 lenovo thinkpad_e490 - -
运行在以下环境
硬件 lenovo thinkpad_e490s - -
运行在以下环境
硬件 lenovo thinkpad_e555 - -
运行在以下环境
硬件 lenovo thinkpad_e560 - -
运行在以下环境
硬件 lenovo thinkpad_e560p - -
运行在以下环境
硬件 lenovo thinkpad_e565 - -
运行在以下环境
硬件 lenovo thinkpad_e570 - -
运行在以下环境
硬件 lenovo thinkpad_e575 - -
运行在以下环境
硬件 lenovo thinkpad_e580 - -
运行在以下环境
硬件 lenovo thinkpad_e585 - -
运行在以下环境
硬件 lenovo thinkpad_e590 - -
运行在以下环境
硬件 lenovo thinkpad_l13 - -
运行在以下环境
硬件 lenovo thinkpad_l1415 - -
运行在以下环境
硬件 lenovo thinkpad_l380 - -
运行在以下环境
硬件 lenovo thinkpad_l380_yoga - -
运行在以下环境
硬件 lenovo thinkpad_l390_yoga - -
运行在以下环境
硬件 lenovo thinkpad_l460 - -
运行在以下环境
硬件 lenovo thinkpad_l470 - -
运行在以下环境
硬件 lenovo thinkpad_l480 - -
运行在以下环境
硬件 lenovo thinkpad_l490 - -
运行在以下环境
硬件 lenovo thinkpad_l560 - -
运行在以下环境
硬件 lenovo thinkpad_l570 - -
运行在以下环境
硬件 lenovo thinkpad_l580 - -
运行在以下环境
硬件 lenovo thinkpad_l590 - -
运行在以下环境
硬件 lenovo thinkpad_p1 - -
运行在以下环境
硬件 lenovo thinkpad_p43s - -
运行在以下环境
硬件 lenovo thinkpad_p50 - -
运行在以下环境
硬件 lenovo thinkpad_p50s - -
运行在以下环境
硬件 lenovo thinkpad_p51 - -
运行在以下环境
硬件 lenovo thinkpad_p51s - -
运行在以下环境
硬件 lenovo thinkpad_p52 - -
运行在以下环境
硬件 lenovo thinkpad_p52s - -
运行在以下环境
硬件 lenovo thinkpad_p53 - -
运行在以下环境
硬件 lenovo thinkpad_p53s - -
运行在以下环境
硬件 lenovo thinkpad_p70 - -
运行在以下环境
硬件 lenovo thinkpad_p71 - -
运行在以下环境
硬件 lenovo thinkpad_p72 - -
运行在以下环境
硬件 lenovo thinkpad_p73 - -
运行在以下环境
硬件 lenovo thinkpad_r14 - -
运行在以下环境
硬件 lenovo thinkpad_r490 - -
运行在以下环境
硬件 lenovo thinkpad_r590 - -
运行在以下环境
硬件 lenovo thinkpad_s1 - -
运行在以下环境
硬件 lenovo thinkpad_s1_3rd - -
运行在以下环境
硬件 lenovo thinkpad_s2_yoga_3rd_gen - -
运行在以下环境
硬件 lenovo thinkpad_s2_yoga_4th_gen - -
运行在以下环境
硬件 lenovo thinkpad_s3 - -
运行在以下环境
硬件 lenovo thinkpad_s3_3rd_gen - -
运行在以下环境
硬件 lenovo thinkpad_s3_gen_2 - -
运行在以下环境
硬件 lenovo thinkpad_s5 - -
运行在以下环境
硬件 lenovo thinkpad_s5_2nd_gen - -
运行在以下环境
硬件 lenovo thinkpad_t25 - -
运行在以下环境
硬件 lenovo thinkpad_t460 - -
运行在以下环境
硬件 lenovo thinkpad_t460p - -
运行在以下环境
硬件 lenovo thinkpad_t460s - -
运行在以下环境
硬件 lenovo thinkpad_t470 - -
运行在以下环境
硬件 lenovo thinkpad_t470p - -
运行在以下环境
硬件 lenovo thinkpad_t470s - -
运行在以下环境
硬件 lenovo thinkpad_t480 - -
运行在以下环境
硬件 lenovo thinkpad_t480s - -
运行在以下环境
硬件 lenovo thinkpad_t490 - -
运行在以下环境
硬件 lenovo thinkpad_t490s - -
运行在以下环境
硬件 lenovo thinkpad_t495 - -
运行在以下环境
硬件 lenovo thinkpad_t495s - -
运行在以下环境
硬件 lenovo thinkpad_t560 - -
运行在以下环境
硬件 lenovo thinkpad_t570 - -
运行在以下环境
硬件 lenovo thinkpad_t580 - -
运行在以下环境
硬件 lenovo thinkpad_t590 - -
运行在以下环境
硬件 lenovo thinkpad_x1_carbon - -
运行在以下环境
硬件 lenovo thinkpad_x1_extreme - -
运行在以下环境
硬件 lenovo thinkpad_x1_tablet - -
运行在以下环境
硬件 lenovo thinkpad_x1_yoga - -
运行在以下环境
硬件 lenovo thinkpad_x260 - -
运行在以下环境
硬件 lenovo thinkpad_x270 - -
运行在以下环境
硬件 lenovo thinkpad_x280 - -
运行在以下环境
硬件 lenovo thinkpad_x380_yoga - -
运行在以下环境
硬件 lenovo thinkpad_x390 - -
运行在以下环境
硬件 lenovo thinkpad_x390_yoga - -
运行在以下环境
硬件 lenovo thinkpad_x395 - -
运行在以下环境
硬件 lenovo thinkpad_yoga_11e_3rd_gen - -
运行在以下环境
硬件 lenovo thinkpad_yoga_11e_4th_gen - -
运行在以下环境
硬件 lenovo thinkpad_yoga_11e_5th_gen - -
运行在以下环境
硬件 lenovo thinkpad_yoga_260 - -
运行在以下环境
硬件 lenovo thinkpad_yoga_370 - -
CVSS3评分
6.8
  • 攻击路径
    物理
  • 攻击复杂度
    低
  • 权限要求
    无
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    高
  • 保密性
    高
  • 完整性
    高
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-ID 漏洞类型
CWE-269 特权管理不恰当
阿里云安全产品覆盖情况