{"containers": {"cna": {"affected": [{"product": "BIOS", "vendor": "Lenovo", "versions": [{"lessThan": "various", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Lenovo thanks LI AO for reporting this issue"}], "descriptions": [{"lang": "en", "value": "In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-358", "description": "CWE-358 Improperly Implemented Security Check for Standard", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-11-11T17:35:17", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.lenovo.com/us/en/product_security/LEN-49266"}], "solutions": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-49266."}], "source": {"advisory": "LEN-49266", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2020-8352", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "BIOS", "version": {"version_data": [{"version_affected": "<", "version_value": "various"}]}}]}, "vendor_name": "Lenovo"}]}}, "credit": [{"lang": "eng", "value": "Lenovo thanks LI AO for reporting this issue"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-358 Improperly Implemented Security Check for Standard"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/product_security/LEN-49266", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-49266"}]}, "solution": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-49266."}], "source": {"advisory": "LEN-49266", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2020-8352", "datePublished": "2020-11-11T17:35:18", "dateReserved": "2020-01-28T00:00:00", "dateUpdated": "2020-11-11T17:35:17", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_e73_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "82678649-187B-45AA-B97D-55307819ED8A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_e73:-:*:*:*:*:*:*:*", "matchCriteriaId": "7B0B0B51-22D3-4C3F-9A10-BA95ABE46E60", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m73_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E25DC8B2-E6DA-4075-AD81-FC6F0B5289C8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m73:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FB24CE6-E1F1-4151-9228-61DCD08E9D01", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:qitian_4500_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "29AFA935-3BEB-41C6-B39F-E00F53A2E735", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:qitian_4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "059D0D62-2B18-4B80-9695-F54DEA73B52B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:qitian_b4550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7ED26246-619C-4B7B-944E-3A88817A3820", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:qitian_b4550:-:*:*:*:*:*:*:*", "matchCriteriaId": "48BA357D-19F6-4850-B662-DFB3A0017074", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:qitian_m4550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA398680-712F-4EAC-952E-BB306764E7EF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:qitian_m4550:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA154A01-0435-4400-B3CF-8ADE895BA597", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m4500k_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "488E6187-E291-4EEC-AD43-76A79D04A19C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m4500k:-:*:*:*:*:*:*:*", "matchCriteriaId": "9CB21E3F-A4D2-4AEC-8279-0CF8C4DA3803", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m4500t_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "55F57378-77D7-443D-A630-0C55F471788B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m4500t:-:*:*:*:*:*:*:*", "matchCriteriaId": "07DD15D9-2F74-4333-BE99-EF2272B58A27", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m4500s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "69C3B125-595A-4C63-8EA7-963B805DE9F0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m4500s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF9C818E-AC09-4676-B1AB-6DD45BD748A1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_afh81_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E735580-F02C-4A62-B5B6-FA96D93EDF31", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_afh81:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E171B10-E2A5-4837-B77B-9B2E4A128DD2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_mc_h81_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2C82C7C-DE7D-452C-9A93-37912A1F5BCE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_mc_h81:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7DC9B3A-7FC1-4D47-B183-31A64B543210", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_mf_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "43A89354-6C0E-41F7-BDCB-D6BDCC7B423D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_mf:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FD1FA2E-918B-4173-808A-9273B903858F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_wf_h81_pci_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "835D08FB-6032-43AE-884C-D91C05916870", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_wf_h81_pci:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D3472DD-DCA4-4885-ABC9-971DC9E761D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_ms_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "21F0AD21-8781-42BA-B133-7F1DF48BC823", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_ms:-:*:*:*:*:*:*:*", "matchCriteriaId": "1AFEA264-A74E-4DE8-9639-DE2989E99969", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_ws_h81_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "001CDD89-1A57-4D40-A4F2-74B7F4FF450B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_ws_h81:-:*:*:*:*:*:*:*", "matchCriteriaId": "E213F2ED-ACA4-46EA-8A19-7B42DC01FDE7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_tc_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "07B6BA5B-D14D-48B1-8989-C7E245FE204D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_tc:-:*:*:*:*:*:*:*", "matchCriteriaId": "45D64822-216E-4227-90EF-522D2AD798B0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yangtian_wcc_h81_pci_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C0474C2-BB36-4AE4-BBD0-19D58117AA5A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yangtian_wcc_h81_pci:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D6C3939-B669-461B-90EA-A40FD9AD8120", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes."}, {"lang": "es", "value": "En algunos modelos Lenovo Desktop, la configuraci\u00f3n Configuration Change Detection BIOS no pudo detectar cambios de configuraci\u00f3n SATA"}], "id": "CVE-2020-8352", "lastModified": "2020-11-25T19:28:36.453", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 1.4, "source": "psirt@lenovo.com", "type": "Secondary"}]}, "published": "2020-11-11T18:15:11.420", "references": [{"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/LEN-49266"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-358"}], "source": "psirt@lenovo.com", "type": "Secondary"}]}

{}