Global infos:

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

CVE Status: Modified

References:

[email protected]

af854a3a-2127-422b-91ae-364da2661108

Metrics:

Attribute	Value
Attack Complexity	LOW
Attack Vector	PHYSICAL
Availability Impact	HIGH
Base Score	6.1
Base Severity	MEDIUM
Confidentiality Impact	NONE
Integrity Impact	HIGH
Privileges Required	NONE
Scope	UNCHANGED
User Interaction	NONE
Vector String	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability Score	0.9
Impact Score	5.2
Source	[email protected]
Type	Secondary

Links:

Exploit-db
Github