VulnerabilityModified
CVE-2020-8321
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
MEDIUM 6.7EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.34% probability · 28th percentile
- CISA KEV
- Not listed
- Affected
- lenovo/130-14ast firmware · lenovo/130-14ikb firmware · lenovo/130-15ast firmware · lenovo/130-15ikb firmware · lenovo/320c-15ikb firmware · lenovo/330-14igm firmware · lenovo/330-14ikb firmware · lenovo/330-14ikbr firmware · lenovo/330-15arr firmware · lenovo/330-15arr touch firmware · lenovo/330-15ich firmware · lenovo/330-15igm firmware · lenovo/330-15ikb firmware · lenovo/330-15ikbr firmware · lenovo/330-15ikbr touch firmware · lenovo/330-17ich firmware · lenovo/330-17ikb firmware · lenovo/330-17ikbr firmware · lenovo/330c-14ikb firmware · lenovo/330c-15ikb firmware · +40 more
- Source
- psirt@lenovo.com
References
- https://support.lenovo.com/us/en/product_security/LEN-30042Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-30042Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.