{"id":"CVE-2020-8353","aliases":["EUVD-2020-29220","GHSA-2h67-7cm6-5mr3"],"status":"published","title":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the...","description":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00554,"percentile":0.46512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-16"],"published":"2020-11-11T17:35:18Z","modified":"2026-06-17T03:26:19Z","products":[{"vendor":"lenovo","product":"desktop and workstation systems"},{"vendor":"lenovo","product":"thinkcentre_m80s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m910z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920z_firmware"},{"vendor":"lenovo","product":"thinkstation_p330_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p330s_firmware"},{"vendor":"lenovo","product":"thinkstation_p330t_firmware"},{"vendor":"lenovo","product":"thinkstation_p340s_firmware"},{"vendor":"lenovo","product":"thinkstation_p340t_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-44725","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8353"},{"url":"https://github.com/advisories/GHSA-2h67-7cm6-5mr3"}],"sources":{"cve":[{"id":"CVE-2020-8353","description":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.","status":"published","published":"2020-11-11T17:35:18Z","modified":"2024-08-04T09:56:28.333Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-16"],"updated_at":"2026-11-02T14:35:51.206854Z"}],"euvd":[{"id":"EUVD-2020-29220","description":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.","status":"published","published":"2020-11-11T17:35:18Z","modified":"2024-08-04T09:56:28Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:07:57.599144Z"}],"ghsa":[{"id":"GHSA-2h67-7cm6-5mr3","title":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the...","description":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.","status":"published","published":"2022-05-24T17:34:09Z","modified":"2023-01-29T05:04:28Z","updated_at":"2026-11-02T14:45:33.67375Z"}],"nvd":[{"id":"CVE-2020-8353","description":"Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.","status":"published","published":"2020-11-11T18:15:11.767Z","modified":"2026-06-17T03:26:19.343Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-16"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}