Lenovo Thinkpad T495s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Thinkpad T495s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-8320 — CVSS 6.4 (medium): An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
• CVE-2020-8323 — CVSS 6.4 (medium): A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo…
• CVE-2020-8334 — CVSS 6.1 (medium): The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for…