CVE-2020-8341 Security feature bypass in ThinkPad
An attacker could bypass secondary SPI flash protection mechanisms on Lenovo ThinkPads after sleep, though primary SMM protection remains active.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-8341?
CVE-2020-8341 is a low-severity vulnerability in Lenovo ThinkPad, published on 1 Sep 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
Which versions are affected by CVE-2020-8341?
It affects 10 products.
Products include Lenovo Thinkpad T490 \(20nx\) Firmware, Lenovo Thinkpad T490 \(20qx\) Firmware, Lenovo Thinkpad T490 \(20rx\) Firmware, Lenovo Thinkpad T490s \(20nx\) Firmware, Lenovo Thinkpad T495 Drift Firmware, Lenovo Thinkpad T590 \(20nx\) Firmware and 4 more.
How do I fix CVE-2020-8341?
No fix has been published for CVE-2020-8341 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-8341 being exploited?
There is no known exploitation of CVE-2020-8341 in the wild and no public exploit code.
Sources
Also known as GHSA-f46h-7c54-hvw7.