low
2.4
CWE
358
Advisory Published
Updated

CVE-2020-8352

First published: Wed Nov 11 2020(Updated: )

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Thinkcentre E73 Firmware
Lenovo Thinkcentre E73
Lenovo Thinkcentre M73 Firmware
Lenovo Thinkcentre M73
Lenovo Qitian 4500 Firmware
Lenovo Qitian 4500
Lenovo Qitian B4550 Firmware
Lenovo Qitian B4550
Lenovo Qitian M4550 Firmware
Lenovo Qitian M4550
Lenovo Thinkcentre M4500k Firmware
Lenovo Thinkcentre M4500k
Lenovo Thinkcentre M4500t Firmware
Lenovo Thinkcentre M4500t
Lenovo Thinkcentre M4500s Firmware
Lenovo Thinkcentre M4500s
Lenovo Yangtian Afh81 Firmware
Lenovo Yangtian Afh81
Lenovo Yangtian Mc H81 Firmware
Lenovo Yangtian Mc H81
Lenovo Yangtian Mf Firmware
Lenovo Yangtian Mf
Lenovo Yangtian Wf H81 Pci Firmware
Lenovo Yangtian Wf H81 Pci
Lenovo Yangtian Ms Firmware
Lenovo Yangtian Ms
Lenovo Yangtian Ws H81 Firmware
Lenovo Yangtian Ws H81
Lenovo Yangtian Tc Firmware
Lenovo Yangtian Tc
Lenovo Yangtian Wcc H81 Pci Firmware
Lenovo Yangtian Wcc H81 Pci

Remedy

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-49266.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2020-8352?

    CVE-2020-8352 is a vulnerability in some Lenovo Desktop models where the Configuration Change Detection BIOS setting fails to detect SATA configuration changes.

  • Which Lenovo Desktop models are affected by CVE-2020-8352?

    Lenovo Thinkcentre E73 Firmware, Lenovo Thinkcentre M73 Firmware, Lenovo Qitian 4500 Firmware, Lenovo Qitian B4550 Firmware, Lenovo Qitian M4550 Firmware, Lenovo Thinkcentre M4500k Firmware, Lenovo Thinkcentre M4500t Firmware, Lenovo Thinkcentre M4500s Firmware, Lenovo Yangtian Afh81 Firmware, Lenovo Yangtian Mc H81 Firmware, Lenovo Yangtian Mf Firmware, Lenovo Yangtian Wf H81 Pci Firmware, Lenovo Yangtian Ms Firmware, Lenovo Yangtian Ws H81 Firmware, Lenovo Yangtian Tc Firmware, Lenovo Yangtian Wcc H81 Pci Firmware.

  • What is the severity of CVE-2020-8352?

    CVE-2020-8352 has a severity score of 2.4, which is considered low.

  • How can I fix CVE-2020-8352 on my Lenovo Desktop?

    To fix CVE-2020-8352, you should check for and install any available BIOS firmware updates provided by Lenovo.

  • Where can I find more information about CVE-2020-8352?

    You can find more information about CVE-2020-8352 on the Lenovo Product Security website.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203