CVE-2020-8350: High severity lenovo thinkpad stack wireless router firmware vulnerability
Published Oct 14, 2020
·Updated
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege.
Affected Software
2 affected components
Lenovo ThinkPad Stack Wireless Router firmware<=1.1.3.4
Lenovo ThinkPad Stack Wireless Router
Remediation
Information
Lenovo has ended support for Lenovo ThinkPad Stack Wireless Router and recommends discontinuation of use.
Event History
Oct 14, 2020
CVE Published
via MITRE·09:25 PM
Data Sourced
via MITRE·09:25 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-8350?
CVE-2020-8350 has been rated as a medium severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2020-8350?
To fix CVE-2020-8350, upgrade the Lenovo ThinkPad Stack Wireless Router firmware to version 1.1.3.5 or later.
3
What versions of Lenovo ThinkPad Stack Wireless Router firmware are affected by CVE-2020-8350?
CVE-2020-8350 affects Lenovo ThinkPad Stack Wireless Router firmware versions up to and including 1.1.3.4.
4
What type of vulnerability is CVE-2020-8350?
CVE-2020-8350 is an authentication bypass vulnerability that can lead to escalation of privilege.
5
Who is affected by CVE-2020-8350?
Users of the Lenovo ThinkPad Stack Wireless Router with firmware version 1.1.3.4 or earlier are affected by CVE-2020-8350.