Is CVE-2020-8320 in the CISA KEV catalog?

No. CVE-2020-8320 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2020-8320?

CVE-2020-8320 has a CVSS v3 base score of 6.4 (MEDIUM).

What is the EPSS score for CVE-2020-8320?

CVE-2020-8320 has an EPSS score of 0.27% (19th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2020-8320?

Upgrade thinkpad 11e firmware to 2020-07-10 or later. Fixes are available for 99 affected products.

CVE & CISA-KEV Catalog

CVE-2020-8320

MEDIUM

6.4

CVSS v3

NVD

Description

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

CWE-489 CWE-269Improper Privilege Management

How to fix

Remediation Available

thinkpad 11e firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad 11e yoga gen 6 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad 13 2nd gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad 13 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad a275 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad a285 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad a475 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad a485 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e14 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e15 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e455 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e460 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e465 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e470 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e475 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e480 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e485 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e490 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e490s firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e555 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e560 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e560p firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e565 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e570 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e575 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e580 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e585 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad e590 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l13 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l1415 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l380 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l380 yoga firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l390 yoga firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l460 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l470 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l480 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l490 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l560 firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad l570 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l580 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad l590 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad p1 firmwareNVD

Affected:< n2eet46wFixed in:n2eet46wCVE-2020-8320derived from NVD

thinkpad p43s firmwareNVD

Affected:< n2iet87wFixed in:n2iet87wCVE-2020-8320derived from NVD

thinkpad p50 firmwareNVD

Affected:< 2020-07-17Fixed in:2020-07-17CVE-2020-8320derived from NVD

thinkpad p50s firmwareNVD

Affected:< 2020-07-24Fixed in:2020-07-24CVE-2020-8320derived from NVD

thinkpad p51 firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad p51s firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad p52 firmwareNVD

Affected:< n2cet51wFixed in:n2cet51wCVE-2020-8320derived from NVD

thinkpad p52s firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad p53 firmwareNVD

Affected:< n2net37wFixed in:n2net37wCVE-2020-8320derived from NVD

thinkpad p53s firmwareNVD

Affected:< n2iet87wFixed in:n2iet87wCVE-2020-8320derived from NVD

thinkpad p70 firmwareNVD

Affected:< 2020-07-17Fixed in:2020-07-17CVE-2020-8320derived from NVD

thinkpad p72 firmwareNVD

Affected:< n2cet51wFixed in:n2cet51wCVE-2020-8320derived from NVD

thinkpad p73 firmwareNVD

Affected:< n2net37wFixed in:n2net37wCVE-2020-8320derived from NVD

thinkpad r14 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad r490 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad r590 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s1 3rd firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s1 firmwareNVD

Affected:< 2020-07-07Fixed in:2020-07-07CVE-2020-8320derived from NVD

thinkpad s2 yoga 3rd gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s2 yoga 4th gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s3 3rd gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s3 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s3 gen 2 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s5 2nd gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad s5 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t25 firmwareNVD

Affected:< n1qet87wFixed in:n1qet87wCVE-2020-8320derived from NVD

thinkpad t460 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t460p firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t460s firmwareNVD

Affected:< 2020-06-19Fixed in:2020-06-19CVE-2020-8320derived from NVD

thinkpad t470 firmwareNVD

Affected:< n1qet87wFixed in:n1qet87wCVE-2020-8320derived from NVD

thinkpad t470p firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t470s firmwareNVD

Affected:< n1wet58wFixed in:n1wet58wCVE-2020-8320derived from NVD

thinkpad t480 firmwareNVD

Affected:< n24et56wFixed in:n24et56wCVE-2020-8320derived from NVD

thinkpad t480s firmwareNVD

Affected:< n22et62wFixed in:n22et62wCVE-2020-8320derived from NVD

thinkpad t490 firmwareNVD

Affected:< n2iet87wFixed in:n2iet87wCVE-2020-8320derived from NVD

thinkpad t490s firmwareNVD

Affected:< n2jet87wFixed in:n2jet87wCVE-2020-8320derived from NVD

thinkpad t495 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t495s firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad t560 firmwareNVD

Affected:< 2020-07-24Fixed in:2020-07-24CVE-2020-8320derived from NVD

thinkpad t570 firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad t580 firmwareNVD

Affected:< 2020-07-03Fixed in:2020-07-03CVE-2020-8320derived from NVD

thinkpad t590 firmwareNVD

Affected:< n2iet87wFixed in:n2iet87wCVE-2020-8320derived from NVD

thinkpad x1 carbon firmwareNVD

Affected:< n1met60wFixed in:n1met60wCVE-2020-8320derived from NVD

thinkpad x1 extreme firmwareNVD

Affected:< n2oet43wFixed in:n2oet43wCVE-2020-8320derived from NVD

thinkpad x1 tablet firmwareNVD

Affected:< 2020-07-24Fixed in:2020-07-24CVE-2020-8320derived from NVD

thinkpad x1 yoga firmwareNVD

Affected:< 2020-07-17Fixed in:2020-07-17CVE-2020-8320derived from NVD

thinkpad x260 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad x270 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad x280 firmwareNVD

Affected:< n20et52wFixed in:n20et52wCVE-2020-8320derived from NVD

thinkpad x380 yoga firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad x390 firmwareNVD

Affected:< 2020-07-07Fixed in:2020-07-07CVE-2020-8320derived from NVD

thinkpad x390 yoga firmwareNVD

Affected:< 2020-06-24Fixed in:2020-06-24CVE-2020-8320derived from NVD

thinkpad x395 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad yoga 11e 3rd gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad yoga 11e 4th gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad yoga 11e 5th gen firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

thinkpad yoga 260 firmwareNVD

Affected:< 2020-07-07Fixed in:2020-07-07CVE-2020-8320derived from NVD

thinkpad yoga 370 firmwareNVD

Affected:< 2020-07-10Fixed in:2020-07-10CVE-2020-8320derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorPhysical

Attack ComplexityHigh

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.27%probability of exploitation in 30 days

19thpercentile

Low risk: more likely to be exploited than 19% of all known CVEs.

References

Vendor Advisory1

support.lenovo.com

Embed a live status badge for CVE-2020-8320

Markdown

[![CVE-2020-8320](https://tridentstack.com/cve/badge/CVE-2020-8320.svg)](https://tridentstack.com/cve/CVE-2020-8320)

HTML

<a href="https://tridentstack.com/cve/CVE-2020-8320"><img src="https://tridentstack.com/cve/badge/CVE-2020-8320.svg" alt="CVE-2020-8320"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.