CVE-2020-8323

Medium

Description

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo Thinkpad 11e Yoga Gen 6 Firmware
PublishedJun 9, 2020
First seenJun 9, 2020

How to fix

Update
  • lenovo thinkpad_11e_yoga_gen_6_firmware2020-07-10 or later
  • lenovo thinkpad_11e_firmware2020-07-10 or later
  • lenovo thinkpad_yoga_11e_3rd_gen_firmware2020-07-10 or later
  • lenovo thinkpad_yoga_11e_4th_gen_firmware2020-07-10 or later
  • lenovo thinkpad_yoga_11e_5th_gen_firmware2020-07-10 or later
  • lenovo thinkpad_13_2nd_gen_firmware2020-07-10 or later
  • lenovo thinkpad_13_firmware2020-07-10 or later
  • lenovo thinkpad_a275_firmware2020-07-10 or later
  • lenovo thinkpad_a285_firmware2020-07-10 or later
  • lenovo thinkpad_a475_firmware2020-07-10 or later
  • lenovo thinkpad_a485_firmware2020-07-10 or later
  • lenovo thinkpad_e14_firmware2020-07-10 or later

Affected products

ProductAffected versionsFixed in
lenovo thinkpad_11e_yoga_gen_6_firmwarev < 2020-07-102020-07-10
lenovo 330-14ast_firmwareNo range specified—
lenovo 330-15ast_firmwareNo range specified—
lenovo 330-17ast_firmwareNo range specified—
lenovo 340c-15api_firmwareNo range specified—
lenovo 340c-15ast_firmwareNo range specified—
lenovo 720s_touch-15ikb_firmwareNo range specified—
lenovo 720s-15ikb_firmwareNo range specified—
lenovo 730s-13iwl_firmwareNo range specified—
lenovo c640-iml_firmwareNo range specified—
lenovo e42-80_firmwareNo range specified—
lenovo e52-80_firmwareNo range specified—
lenovo k22-80_firmwareNo range specified—
lenovo v720-12_firmwareNo range specified—
lenovo k32-80_kbl_firmwareNo range specified—
lenovo k32-80_skl_firmwareNo range specified—
lenovo miix_720-12ikb_firmwareNo range specified—
lenovo s145-14api_firmwareNo range specified—
lenovo s145-14ast_firmwareNo range specified—
lenovo s145-15api_firmwareNo range specified—
lenovo s145-15ast_firmwareNo range specified—
lenovo s540-13api_firmwareNo range specified—
lenovo s750-iil_firmwareNo range specified—
lenovo s940-14iwl_firmwareNo range specified—
lenovo thinkbook_13s-iwl_firmwareNo range specified—
lenovo thinkbook_14s-iwl_firmwareNo range specified—
lenovo v110-14ast_firmwareNo range specified—
lenovo v110-14ikb_firmwareNo range specified—
lenovo v110-15ast_firmwareNo range specified—
lenovo v130-15igm_firmwareNo range specified—
lenovo v130-15ikb_firmwareNo range specified—
lenovo v310-15igm_firmwareNo range specified—
lenovo v330-15igm_firmwareNo range specified—
lenovo v330-15ikb_firmwareNo range specified—
lenovo v330-15isk_firmwareNo range specified—
lenovo v340-iil_firmwareNo range specified—
lenovo v340-iml_firmwareNo range specified—
lenovo v540s-13_firmwareNo range specified—
lenovo 14iwl_firmwareNo range specified—
lenovo v730-13ikb_firmwareNo range specified—
lenovo v730-13isk_firmwareNo range specified—
lenovo v730-15ikb_firmwareNo range specified—
lenovo wei5-15ikb_firmwareNo range specified—
lenovo xiaoxin_14-ast_qc_2019_firmwareNo range specified—
lenovo xx-14api_qc_2019_firmwareNo range specified—
lenovo yoga_s730-13iwl_firmwareNo range specified—
lenovo yoga_s940-14iwl_firmwareNo range specified—
lenovo 6_pro-13-iwl_firmwareNo range specified—
lenovo 6_pro-14-iwl_firmwareNo range specified—
lenovo e53-80_firmwareNo range specified—
lenovo k3_firmwareNo range specified—
lenovo k4-iwl_firmwareNo range specified—
lenovo thinkpad_11e_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_yoga_11e_3rd_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_yoga_11e_4th_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_yoga_11e_5th_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_13_2nd_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_13_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_a275_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_a285_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_a475_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_a485_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e14_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e15_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_r14_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s3_gen_2_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e455_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e555_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e460_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e560_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e465_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e565_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e470_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e570_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e475_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e575_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e480_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e580_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e485_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e585_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e490s_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s3_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e490_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e590_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_r490_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_r590_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l13_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l1415_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l380_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s3_3rd_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l380_yoga_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s2_yoga_3rd_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l390_yoga_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s2_yoga_4th_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l460_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l470_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l480_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l580_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l490_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l590_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_l560_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_l570_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_p1_firmwarev < n2eet46wn2eet46w
lenovo thinkpad_p43s_firmwarev < n2iet87wn2iet87w
lenovo thinkpad_p50_firmwarev < 2020-07-172020-07-17
lenovo thinkpad_p50s_firmwarev < 2020-07-242020-07-24
lenovo thinkpad_p51_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_p51s_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_p52_firmwarev < n2cet51wn2cet51w
lenovo thinkpad_p52s_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_p53_firmwarev < n2net37wn2net37w
lenovo thinkpad_p53s_firmwarev < n2iet87wn2iet87w
lenovo thinkpad_p70_firmwarev < 2020-07-172020-07-17
lenovo thinkpad_p71_firmwarev ≤ 2020-07-17—
lenovo thinkpad_p72_firmwarev < n2cet51wn2cet51w
lenovo thinkpad_p73_firmwarev < n2net37wn2net37w
lenovo thinkpad_s5_2nd_gen_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s5_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_e560p_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t25_firmwarev < n1qet87wn1qet87w
lenovo thinkpad_t460_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t460p_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t460s_firmwarev < 2020-06-192020-06-19
lenovo thinkpad_t470_firmwarev < n1qet87wn1qet87w
lenovo thinkpad_t470p_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t470s_firmwarev < n1wet58wn1wet58w
lenovo thinkpad_t480_firmwarev < n24et56wn24et56w
lenovo thinkpad_t480s_firmwarev < n22et62wn22et62w
lenovo thinkpad_t490_firmwarev < n2iet87wn2iet87w
lenovo thinkpad_t490s_firmwarev < n2jet87wn2jet87w
lenovo thinkpad_t560_firmwarev < 2020-07-242020-07-24
lenovo thinkpad_t570_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_t580_firmwarev < 2020-07-032020-07-03
lenovo thinkpad_t590_firmwarev < n2iet87wn2iet87w
lenovo thinkpad_x1_carbon_firmwarev < n1met60wn1met60w
lenovo thinkpad_x1_yoga_firmwarev < 2020-07-172020-07-17
lenovo thinkpad_x1_extreme_firmwarev < n2oet43wn2oet43w
lenovo thinkpad_x1_tablet_firmwarev < 2020-07-242020-07-24
lenovo thinkpad_x260_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_x270_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_x280_firmwarev < n20et52wn20et52w
lenovo thinkpad_x380_yoga_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_x390_firmwarev < 2020-07-072020-07-07
lenovo thinkpad_x390_yoga_firmwarev < 2020-06-242020-06-24
lenovo thinkpad_x395_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_yoga_260_firmwarev < 2020-07-072020-07-07
lenovo thinkpad_s1_firmwarev < 2020-07-072020-07-07
lenovo thinkpad_yoga_370_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_s1_3rd_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t495_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_t495s_firmwarev < 2020-07-102020-07-10
lenovo thinkpad_helix_firmwarev < n17etb2wn17etb2w
lenovo thinkpad_s1_yoga_firmwarev < gqet63wwgqet63ww
lenovo thinkpad_s1_yoga_vpro_firmwarev < b0et47wwb0et47ww
lenovo thinkpad_s5_yoga_15_firmwarev < n19et64wn19et64w
lenovo thinkpad_s540_firmwarev < gpet81wwgpet81ww
lenovo thinkpad_t440_firmwarev < gjeta4wwgjeta4ww
lenovo thinkpad_t440s_firmwarev < gjeta4wwgjeta4ww
lenovo thinkpad_t440p_firmwarev < gleta1wwgleta1ww
lenovo thinkpad_t540_firmwarev < gmet90wwgmet90ww
lenovo thinkpad_t540p_firmwarev < gmet90wwgmet90ww
lenovo thinkpad_t550_firmwarev < n11et52wn11et52w
lenovo thinkpad_w540_firmwarev < gnet93wwgnet93ww
lenovo thinkpad_w541_firmwarev < gnet93wwgnet93ww
lenovo thinkpad_w550s_firmwarev < n11et52wn11et52w
lenovo thinkpad_x1_carbon_\(20ax\)_firmwarev < gret63wwgret63ww
lenovo thinkpad_x1_carbon_\(20bx\)_firmwarev < n14et54wn14et54w
lenovo thinkpad_x140e_firmwarev < gset74wwgset74ww
lenovo thinkpad_x240_firmwarev < giet99wwgiet99ww
lenovo thinkpad_x240s_firmwarev < giet99wwgiet99ww
lenovo thinkpad_x250_firmwarev < n10et61wn10et61w
lenovo thinkpad_yoga_11e_\(20dx\)_firmwarev < n15et79wn15et79w

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.