CVE-2020-8335: Lenovo Thinkpad a275 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

Affected products

• Lenovo Thinkpad a275 Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad a285 Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad a475 Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad a485 Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad t495 Drift Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad t495s Jazz Firmware: before 2020-08-30 (fixed in 2020-08-30)
• Lenovo Thinkpad x1 Carbon (20bx) Firmware: before n14et54w (fixed in n14et54w)
• Lenovo Thinkpad x395 Firmware: before 2020-08-30 (fixed in 2020-08-30)

Published 2020-09-01. Last modified 2026-06-17.