Published: 09/06/2020 Updated: 22/06/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
lenovo thinkpad_e14_firmware
lenovo thinkpad_e15_firmware
lenovo thinkpad_r14_firmware
lenovo thinkpad_s3_gen_2_firmware
lenovo thinkpad_e490s_firmware
lenovo thinkpad_s3_firmware
lenovo thinkpad_e490_firmware
lenovo thinkpad_e590_firmware
lenovo thinkpad_r490_firmware
lenovo thinkpad_r590_firmware
lenovo thinkpad_l13_1st_gen_firmware
lenovo thinkpad_l1415_gen_1_firmware
lenovo thinkpad_l390_yoga_firmware
lenovo thinkpad_s2_yoga_4th_gen_firmware
lenovo thinkpad_l490_firmware
lenovo thinkpad_l590_firmware
lenovo thinkpad_p1_\\(20mx\\)_firmware
lenovo thinkpad_p1_\\(20qx\\)_firmware
lenovo thinkpad_p43s_\\(20rx\\)_firmware
lenovo thinkpad_p52_\\(20mx\\)_firmware
lenovo thinkpad_p53_\\(20qx\\)_firmware
lenovo thinkpad_p53s_\\(20nx\\)_firmware
lenovo thinkpad_p72_\\(20mx\\)_firmware
lenovo thinkpad_p73_\\(20qx\\)_firmware
lenovo thinkpad_t490_\\(20nx\\)_firmware
lenovo thinkpad_t490_\\(20qx\\)_firmware
lenovo thinkpad_t490_\\(20rx\\)_firmware
lenovo thinkpad_t490s_\\(20nx\\)_firmware
lenovo thinkpad_t590_\\(20nx\\)_firmware
lenovo thinkpad_x1_carbon_\\(20qx\\)_firmware
lenovo thinkpad_x1_carbon_\\(20rx\\)_firmware
lenovo thinkpad_x1_extreme_\\(20mx\\)_firmware
lenovo thinkpad_x1_extreme_\\(20qx\\)_firmware
lenovo thinkpad_x1_yoga_\\(20qx\\)_firmware
lenovo thinkpad_x1_yoga_\\(20sx\\)_firmware
lenovo thinkpad_x390_\\(20qx\\)_firmware
lenovo thinkpad_x390_\\(20sx\\)_firmware
lenovo thinkpad_x390_yoga_firmware

CVE-2020-8336