CVE-2020-8353
First published: Wed Nov 11 2020(Updated: )
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Thinkcentre M80t Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M80t | ||
| Lenovo Thinkcentre M80s Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M80s | ||
| Lenovo Thinkcentre M90t Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M90t | ||
| Lenovo Thinkcentre M90s Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M90s | ||
| Lenovo Thinkcentre M910z Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M910z | ||
| Lenovo Thinkcentre M920s Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M920s | ||
| Lenovo Thinkcentre M920t Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M920t | ||
| Lenovo Thinkcentre M920q Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M920q | ||
| Lenovo Thinkcentre M920z Firmware | <2020-08-10 | |
| Lenovo Thinkcentre M920z | ||
| Lenovo Thinkstation P330t Firmware | <2020-08-10 | |
| Lenovo Thinkstation P330t | ||
| Lenovo Thinkstation P330s Firmware | <2020-08-10 | |
| Lenovo Thinkstation P330s | ||
| Lenovo Thinkstation P330 Tiny Firmware | <2020-08-10 | |
| Lenovo Thinkstation P330 Tiny | ||
| Lenovo Thinkstation P340t Firmware | <2020-08-10 | |
| Lenovo Thinkstation P340t | ||
| Lenovo Thinkstation P340s Firmware | <2020-08-10 | |
| Lenovo Thinkstation P340s |
Remedy
Use the Intel® AMT Configuration Utility 12.2.0.150 or later to verify the EHBC is enabled. Check EHBC Status: ACUConfig.exe /verbose /output console Status To disable Intel EHBC: ACUConfig.exe DisableEhbcState
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8353?
CVE-2020-8353 is a vulnerability that affects some Lenovo Desktop and Workstation systems shipped prior to August 10, 2020.
How does CVE-2020-8353 affect Lenovo systems?
CVE-2020-8353 enables an administrative user with local access to configure Intel AMT on affected Lenovo systems.
What is the severity of CVE-2020-8353?
CVE-2020-8353 has a severity rating of 6.7 (medium).
How can I fix CVE-2020-8353?
To fix CVE-2020-8353, Lenovo recommends updating the firmware of the affected systems to a version released on or after August 10, 2020.
Where can I find more information about CVE-2020-8353?
You can find more information about CVE-2020-8353 on the Lenovo Product Security website.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/remedy
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/lenovo
- canonical/lenovo thinkcentre m80t firmware
- canonical/lenovo thinkcentre m80t
- canonical/lenovo thinkcentre m80s firmware
- canonical/lenovo thinkcentre m80s
- canonical/lenovo thinkcentre m90t firmware
- canonical/lenovo thinkcentre m90t
- canonical/lenovo thinkcentre m90s firmware
- canonical/lenovo thinkcentre m90s
- canonical/lenovo thinkcentre m910z firmware
- canonical/lenovo thinkcentre m910z
- canonical/lenovo thinkcentre m920s firmware
- canonical/lenovo thinkcentre m920s
- canonical/lenovo thinkcentre m920t firmware
- canonical/lenovo thinkcentre m920t
- canonical/lenovo thinkcentre m920q firmware
- canonical/lenovo thinkcentre m920q
- canonical/lenovo thinkcentre m920z firmware
- canonical/lenovo thinkcentre m920z
- canonical/lenovo thinkstation p330t firmware
- canonical/lenovo thinkstation p330t
- canonical/lenovo thinkstation p330s firmware
- canonical/lenovo thinkstation p330s
- canonical/lenovo thinkstation p330 tiny firmware
- canonical/lenovo thinkstation p330 tiny
- canonical/lenovo thinkstation p340t firmware
- canonical/lenovo thinkstation p340t
- canonical/lenovo thinkstation p340s firmware
- canonical/lenovo thinkstation p340s