CVE-2020-8320
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation...
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
- Record
CVE-2020-8320- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-489
- Updated
- 2026-11-02
EUVDEUVD-2020-29187
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
- Record
EUVD-2020-29187- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cmxh-vpch-g426 No score
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation...
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
- Record
GHSA-cmxh-vpch-g426- Updated
- 2026-11-02
NVD
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
- Record
CVE-2020-8320- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-489, CWE-269
- Updated
- 2026-11-02
Affected products
- lenovo bios
- lenovo thinkpad 11e firmware
- lenovo thinkpad 11e yoga gen 6 firmware
- lenovo thinkpad 13 2nd gen firmware
- lenovo thinkpad 13 firmware
- lenovo thinkpad a275 firmware
- lenovo thinkpad a285 firmware
- lenovo thinkpad a475 firmware
- lenovo thinkpad a485 firmware
- lenovo thinkpad e14 firmware
- lenovo thinkpad e15 firmware
- lenovo thinkpad e455 firmware
Show 89 moreShow less
- lenovo thinkpad e460 firmware
- lenovo thinkpad e465 firmware
- lenovo thinkpad e470 firmware
- lenovo thinkpad e475 firmware
- lenovo thinkpad e480 firmware
- lenovo thinkpad e485 firmware
- lenovo thinkpad e490 firmware
- lenovo thinkpad e490s firmware
- lenovo thinkpad e555 firmware
- lenovo thinkpad e560 firmware
- lenovo thinkpad e560p firmware
- lenovo thinkpad e565 firmware
- lenovo thinkpad e570 firmware
- lenovo thinkpad e575 firmware
- lenovo thinkpad e580 firmware
- lenovo thinkpad e585 firmware
- lenovo thinkpad e590 firmware
- lenovo thinkpad l13 firmware
- lenovo thinkpad l1415 firmware
- lenovo thinkpad l380 firmware
- lenovo thinkpad l380 yoga firmware
- lenovo thinkpad l390 yoga firmware
- lenovo thinkpad l460 firmware
- lenovo thinkpad l470 firmware
- lenovo thinkpad l480 firmware
- lenovo thinkpad l490 firmware
- lenovo thinkpad l560 firmware
- lenovo thinkpad l570 firmware
- lenovo thinkpad l580 firmware
- lenovo thinkpad l590 firmware
- lenovo thinkpad p1 firmware
- lenovo thinkpad p43s firmware
- lenovo thinkpad p50 firmware
- lenovo thinkpad p50s firmware
- lenovo thinkpad p51 firmware
- lenovo thinkpad p51s firmware
- lenovo thinkpad p52 firmware
- lenovo thinkpad p52s firmware
- lenovo thinkpad p53 firmware
- lenovo thinkpad p53s firmware
- lenovo thinkpad p70 firmware
- lenovo thinkpad p71 firmware
- lenovo thinkpad p72 firmware
- lenovo thinkpad p73 firmware
- lenovo thinkpad r14 firmware
- lenovo thinkpad r490 firmware
- lenovo thinkpad r590 firmware
- lenovo thinkpad s1 3rd firmware
- lenovo thinkpad s1 firmware
- lenovo thinkpad s2 yoga 3rd gen firmware
- lenovo thinkpad s2 yoga 4th gen firmware
- lenovo thinkpad s3 3rd gen firmware
- lenovo thinkpad s3 firmware
- lenovo thinkpad s3 gen 2 firmware
- lenovo thinkpad s5 2nd gen firmware
- lenovo thinkpad s5 firmware
- lenovo thinkpad t25 firmware
- lenovo thinkpad t460 firmware
- lenovo thinkpad t460p firmware
- lenovo thinkpad t460s firmware
- lenovo thinkpad t470 firmware
- lenovo thinkpad t470p firmware
- lenovo thinkpad t470s firmware
- lenovo thinkpad t480 firmware
- lenovo thinkpad t480s firmware
- lenovo thinkpad t490 firmware
- lenovo thinkpad t490s firmware
- lenovo thinkpad t495 firmware
- lenovo thinkpad t495s firmware
- lenovo thinkpad t560 firmware
- lenovo thinkpad t570 firmware
- lenovo thinkpad t580 firmware
- lenovo thinkpad t590 firmware
- lenovo thinkpad x1 carbon firmware
- lenovo thinkpad x1 extreme firmware
- lenovo thinkpad x1 tablet firmware
- lenovo thinkpad x1 yoga firmware
- lenovo thinkpad x260 firmware
- lenovo thinkpad x270 firmware
- lenovo thinkpad x280 firmware
- lenovo thinkpad x380 yoga firmware
- lenovo thinkpad x390 firmware
- lenovo thinkpad x390 yoga firmware
- lenovo thinkpad x395 firmware
- lenovo thinkpad yoga 11e 3rd gen firmware
- lenovo thinkpad yoga 11e 4th gen firmware
- lenovo thinkpad yoga 11e 5th gen firmware
- lenovo thinkpad yoga 260 firmware
- lenovo thinkpad yoga 370 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8320 is a medium vulnerability (CVSS 6.4) in Lenovo Bios, published June 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 21st percentile. No source names a fixed version.