CVE-2020-8341

LOW Year: 2020
CVSS v3 Score
2.4
Low
CVSS v2 Score
2.1
Low
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Related Vulnerabilities

CVE-2017-2705

LOW
CVSS:2.4(Low)

Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, ...

NVD-CWE-Other2017

CVE-2017-3320

LOW
CVSS:2.4(Low)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability ...

NVD-CWE-Other2017

CVE-2018-3184

LOW
CVSS:2.4(Low)

Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: IQR - Foundation Services). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows hi...

NVD-CWE-Other2018

CVE-2019-19563

LOW
CVSS:2.4(Low)

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.

NVD-CWE-Other2019

CVE-2019-20534

LOW
CVSS:2.4(Low)

An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsung ID is SVE-2019-15540 (Decem...

NVD-CWE-Other2019

CVE-2019-2735

LOW
CVSS:2.4(Low)

Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability a...

NVD-CWE-Other2019