CVE-2020-8333
Medium
Description
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo Thinkstation C30 Firmware
PublishedSep 24, 2020
First seenSep 24, 2020
How to fix
Update
- lenovo thinkstation_c30_firmwarea3kt70a or later
- lenovo 63_firmwarefckt98a or later
- lenovo h50-30g_firmwarefckt98a or later
- lenovo m4500_firmwarefckt98a or later
- lenovo m4550_firmwarefckt98a or later
- lenovo qitian_4500_firmwarefckt98a or later
- lenovo qitian_b4550_firmwarefckt98a or later
- lenovo qitian_m4550_firmwarefckt98a or later
- lenovo thinkcentre_e73_firmwarefckt98a or later
- lenovo thinkcentre_e73s_firmwarefckt98a or later
- lenovo thinkcentre_e93_firmwarefbktdea or later
- lenovo thinkcentre_m4500k_firmwarefckt98a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkstation_c30_firmware | v < a3kt70a | a3kt70a |
| lenovo 63_firmware | v < fckt98a | fckt98a |
| lenovo h50-30g_firmware | v < fckt98a | fckt98a |
| lenovo m4500_firmware | v < fckt98a | fckt98a |
| lenovo m4550_firmware | v < fckt98a | fckt98a |
| lenovo qitian_4500_firmware | v < fckt98a | fckt98a |
| lenovo qitian_b4550_firmware | v < fckt98a | fckt98a |
| lenovo qitian_m4550_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_e73_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_e73s_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_e93_firmware | v < fbktdea | fbktdea |
| lenovo thinkcentre_m4500k_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_m4500q_firmware | v < fhkt85a | fhkt85a |
| lenovo thinkcentre_m4500t_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_m4500s_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_afh81_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_mc_h81_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_mf_h81_pci_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_wf_h81_pci_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_tc_h81_pci_firmware | v < fckt98a | fckt98a |
| lenovo yangtian_wcc_h81_pci_firmware | v < fckt98a | fckt98a |
| lenovo thinkcentre_m9350z_firmware | v < fekta2a | fekta2a |
| lenovo thinkcentre_m93z_firmware | v < fekta2a | fekta2a |
| lenovo thinkstation_d30_firmware | v < a3kt70a | a3kt70a |
| lenovo thinkstation_e32_firmware | v < fbktdea | fbktdea |
| lenovo thinkstation_p300_firmware | v < a2kt70a | a2kt70a |
| lenovo thinkstation_s30_firmware | v < a2kt70a | a2kt70a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.