CVE-2020-8350

HIGH

Lenovo ThinkPad Stack Wireless Router <1.1.3.4 - Privilege Escalation

Title source: llm

Description

An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.lenovo.com/us/en/product_security/LEN-48228

Scores

CVSS v3 8.8

EPSS 0.0012

EPSS Percentile 30.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (1)

lenovo/thinkpad_stack_wireless_router_firmware < 1.1.3.4

Published Oct 14, 2020

Tracked Since Feb 18, 2026