CVE-2020-8353: Lenovo Thinkcentre m80s Firmware

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

Affected products

• Lenovo Thinkcentre m80s Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m80t Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m90s Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m90t Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m910z Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m920q Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m920s Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m920t Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkcentre m920z Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkstation p330 Tiny Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkstation p330s Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkstation p330t Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkstation p340s Firmware: before 2020-08-10 (fixed in 2020-08-10)
• Lenovo Thinkstation p340t Firmware: before 2020-08-10 (fixed in 2020-08-10)

Published 2020-11-11. Last modified 2026-06-17.