CVE-2020-8322
Medium
Description
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo 330-14ast Firmware
PublishedJun 9, 2020
First seenJun 9, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo 330-14ast_firmware | No range specified | — |
| lenovo 330-15ast_firmware | No range specified | — |
| lenovo 330-17ast_firmware | No range specified | — |
| lenovo 340c-15api_firmware | No range specified | — |
| lenovo 340c-15ast_firmware | No range specified | — |
| lenovo 720s_touch-15ikb_firmware | No range specified | — |
| lenovo 720s-15ikb_firmware | No range specified | — |
| lenovo 730s-13iwl_firmware | No range specified | — |
| lenovo c640-iml_firmware | No range specified | — |
| lenovo e42-80_firmware | No range specified | — |
| lenovo e52-80_firmware | No range specified | — |
| lenovo k22-80_firmware | No range specified | — |
| lenovo v720-12_firmware | No range specified | — |
| lenovo k32-80_kbl_firmware | No range specified | — |
| lenovo k32-80_skl_firmware | No range specified | — |
| lenovo miix_720-12ikb_firmware | No range specified | — |
| lenovo s145-14api_firmware | No range specified | — |
| lenovo s145-14ast_firmware | No range specified | — |
| lenovo s145-15api_firmware | No range specified | — |
| lenovo s145-15ast_firmware | No range specified | — |
| lenovo s540-13api_firmware | No range specified | — |
| lenovo s750-iil_firmware | No range specified | — |
| lenovo s940-14iwl_firmware | No range specified | — |
| lenovo thinkbook_13s-iwl_firmware | No range specified | — |
| lenovo thinkbook_14s-iwl_firmware | No range specified | — |
| lenovo v110-14ast_firmware | No range specified | — |
| lenovo v110-14ikb_firmware | No range specified | — |
| lenovo v110-15ast_firmware | No range specified | — |
| lenovo v130-15igm_firmware | No range specified | — |
| lenovo v130-15ikb_firmware | No range specified | — |
| lenovo v310-15igm_firmware | No range specified | — |
| lenovo v330-15igm_firmware | No range specified | — |
| lenovo v330-15ikb_firmware | No range specified | — |
| lenovo v330-15isk_firmware | No range specified | — |
| lenovo v340-iil_firmware | No range specified | — |
| lenovo v340-iml_firmware | No range specified | — |
| lenovo v540s-13_firmware | No range specified | — |
| lenovo 14iwl_firmware | No range specified | — |
| lenovo v730-13ikb_firmware | No range specified | — |
| lenovo v730-13isk_firmware | No range specified | — |
| lenovo v730-15ikb_firmware | No range specified | — |
| lenovo wei5-15ikb_firmware | No range specified | — |
| lenovo xiaoxin_14-ast_qc_2019_firmware | No range specified | — |
| lenovo xx-14api_qc_2019_firmware | No range specified | — |
| lenovo yoga_s730-13iwl_firmware | No range specified | — |
| lenovo yoga_s940-14iwl_firmware | No range specified | — |
| lenovo 6_pro-13-iwl_firmware | No range specified | — |
| lenovo 6_pro-14-iwl_firmware | No range specified | — |
| lenovo e53-80_firmware | No range specified | — |
| lenovo k3_firmware | No range specified | — |
| lenovo k4-iwl_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.