CVE-2020-8321
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.34% probability · 28th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- lenovo/130-14ast firmware · lenovo/130-14ikb firmware · lenovo/130-15ast firmware · lenovo/130-15ikb firmware · lenovo/320c-15ikb firmware · lenovo/330-14igm firmware · lenovo/330-14ikb firmware · lenovo/330-14ikbr firmware · lenovo/330-15arr firmware · lenovo/330-15arr touch firmware · lenovo/330-15ich firmware · lenovo/330-15igm firmware · lenovo/330-15ikb firmware · lenovo/330-15ikbr firmware · lenovo/330-15ikbr touch firmware · lenovo/330-17ich firmware · lenovo/330-17ikb firmware · lenovo/330-17ikbr firmware · lenovo/330c-14ikb firmware · lenovo/330c-15ikb firmware · +40 more
- Source
- psirt@lenovo.com
EPSS 0.3% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.lenovo.com/us/en/product_security/LEN-30042Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-30042Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.