CVE-2020-8353
First published: Wed Nov 11 2020(Updated: )
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo ThinkCentre M80t Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M80t Gen 3 | ||
| Lenovo Ideacentre M80s Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M80s Gen 3 | ||
| Lenovo Thinkcentre M90t Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M90t Gen 3 | ||
| Lenovo ThinkCentre M90s Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M90s Gen 3 | ||
| Lenovo ThinkCentre M910q Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M910z Firmware | ||
| Lenovo ThinkCentre M920s Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M920s Firmware | ||
| Lenovo Ideacentre M920t Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M920t | ||
| Lenovo Ideacentre M920q Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M920q | ||
| Lenovo ThinkCentre M920z All-in-One Firmware | <2020-08-10 | |
| Lenovo ThinkCentre M920z All-in-One | ||
| Lenovo ThinkStation P330t Firmware | <2020-08-10 | |
| Lenovo ThinkStation P330t Firmware | ||
| Lenovo ThinkStation P330s Firmware | <2020-08-10 | |
| Lenovo ThinkStation P330s Firmware | ||
| Lenovo ThinkStation P330 Tiny Firmware | <2020-08-10 | |
| Lenovo ThinkStation P330 Tiny | ||
| Lenovo ThinkStation P340t Firmware | <2020-08-10 | |
| Lenovo ThinkStation P340t Firmware | ||
| Lenovo ThinkStation P340s Firmware | <2020-08-10 | |
| Lenovo ThinkStation P340s Firmware |
Remedy
Use the Intel® AMT Configuration Utility 12.2.0.150 or later to verify the EHBC is enabled. Check EHBC Status: ACUConfig.exe /verbose /output console Status To disable Intel EHBC: ACUConfig.exe DisableEhbcState
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8353?
CVE-2020-8353 is a vulnerability that affects some Lenovo Desktop and Workstation systems shipped prior to August 10, 2020.
How does CVE-2020-8353 affect Lenovo systems?
CVE-2020-8353 enables an administrative user with local access to configure Intel AMT on affected Lenovo systems.
What is the severity of CVE-2020-8353?
CVE-2020-8353 has a severity rating of 6.7 (medium).
How can I fix CVE-2020-8353?
To fix CVE-2020-8353, Lenovo recommends updating the firmware of the affected systems to a version released on or after August 10, 2020.
Where can I find more information about CVE-2020-8353?
You can find more information about CVE-2020-8353 on the Lenovo Product Security website.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/lenovo
- canonical/lenovo thinkcentre m80t firmware
- canonical/lenovo thinkcentre m80t gen 3
- canonical/lenovo ideacentre m80s firmware
- canonical/lenovo thinkcentre m80s gen 3
- canonical/lenovo thinkcentre m90t firmware
- canonical/lenovo thinkcentre m90t gen 3
- canonical/lenovo thinkcentre m90s firmware
- canonical/lenovo thinkcentre m90s gen 3
- canonical/lenovo thinkcentre m910q firmware
- canonical/lenovo thinkcentre m910z firmware
- canonical/lenovo thinkcentre m920s firmware
- canonical/lenovo ideacentre m920t firmware
- canonical/lenovo thinkcentre m920t
- canonical/lenovo ideacentre m920q firmware
- canonical/lenovo thinkcentre m920q
- canonical/lenovo thinkcentre m920z all-in-one firmware
- canonical/lenovo thinkcentre m920z all-in-one
- canonical/lenovo thinkstation p330t firmware
- canonical/lenovo thinkstation p330s firmware
- canonical/lenovo thinkstation p330 tiny firmware
- canonical/lenovo thinkstation p330 tiny
- canonical/lenovo thinkstation p340t firmware
- canonical/lenovo thinkstation p340s firmware