CVE-2020-8337

Medium

Description

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

SeverityMedium
CVSS6.7
Exploit probability—
ProductSynaptics Smart Audio Uwp
PublishedJun 9, 2020
First seenJun 9, 2020
Weakness typeCWE-428CWE-428

How to fix

Update
  • synaptics smart_audio_uwp1.0.83.0 or later

Affected products

ProductAffected versionsFixed in
synaptics smart_audio_uwpv < 1.0.83.01.0.83.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.