CVE-2020-8321 | Severity.io

Description

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

Related CPE's

130-14ast_firmware

Vulnerable

130-14ikb_firmware

Vulnerable

130-15ast_firmware

Vulnerable

130-15ikb_firmware

Vulnerable

320c-15ikb_firmware

Vulnerable

330-14igm_firmware

Vulnerable

330-14ikb_firmware

Vulnerable

330-14ikbr_firmware

Vulnerable

330-15arr_firmware

Vulnerable

330-15arr_touch_firmware

Vulnerable

330-15arr_touch

330-15ich_firmware

Vulnerable

330-15igm_firmware

Vulnerable

330-15ikb_firmware

Vulnerable

330-15ikbr_firmware

Vulnerable

330-15ikbr_touch_firmware

Vulnerable

330-15ikbr_touch

330-17ich_firmware

Vulnerable

330-17ikb_firmware

Vulnerable

330-17ikbr_firmware

Vulnerable

330c-14ikb_firmware

Vulnerable

330c-15ikb_firmware

Vulnerable

330c-15ikbr_firmware

Vulnerable

340c-15igm_firmware

Vulnerable

340c-15ikb_firmware

Vulnerable

340c-15iwl_firmware

Vulnerable

530s-14iwl_firmware

Vulnerable

530s-15iwl_firmware

Vulnerable

530s-14arr_firmware

Vulnerable

530s-14ikb_firmware

Vulnerable

530s-15ikb_firmware

Vulnerable

720s-13arr_firmware

Vulnerable

720s-14ikbr_firmware

Vulnerable

c340-14api_firmware

Vulnerable

c340-14iml_firmware

Vulnerable

c340-14iwl_firmware

Vulnerable

c340-15iil_firmware

Vulnerable

c340-15iml_firmware

Vulnerable

c340-15iwl_firmware

Vulnerable

d330-10igm_firmware

Vulnerable

d335-10igm_firmware

Vulnerable

e4-14arr_firmware

Vulnerable

flex_6-14arr_firmware

Vulnerable

flex_6-14ikb_firmware

Vulnerable

flex-14iwl_firmware

Vulnerable

flex-15iwl_firmware

Vulnerable

ideapad_3_14_firmware

Vulnerable

ideapad_3_15_firmware

Vulnerable

ideapad_3_17iml05_firmware

Vulnerable

ideapad_3_17iml05

ideapad_3_15iil05_firmware

Vulnerable

ideapad_3_15iil05

ideapad_3_14iil05_firmware

Vulnerable

ideapad_3_14iil05

ideapad_5_15iil05_firmware

Vulnerable

ideapad_5_15iil05

k43c-80_firmware

Vulnerable

l3_15iml05_firmware

Vulnerable

l340-15api_firmware

Vulnerable

l340-15api_touch_firmware

Vulnerable

l340-15api_touch

l340-15irh_firmware

Vulnerable

l340-15iwl_touch_firmware

Vulnerable

l340-15iwl_touch

l340-17api_firmware

Vulnerable

l340-17irh_firmware

Vulnerable

l340-17iwl_firmware

Vulnerable

legion_y530-15ich_firmware

Vulnerable

legion_y530-15ich

legion_y530-15ich-1060_firmware

Vulnerable

legion_y530-15ich-1060

legion_y540-15_pg0_firmware

Vulnerable

legion_y540-15_pg0

legion_y540-15irh_firmware

Vulnerable

legion_y540-15irh

legion_y540-17_pg0_firmware

Vulnerable

legion_y540-17_pg0

legion_y540-17irh_firmware

Vulnerable

legion_y540-17irh

legion_y545_firmware

Vulnerable

legion_y545_pg0_firmware

Vulnerable

legion_y545_pg0

legion_y7000_2019_firmware

Vulnerable

legion_y7000_2019

legion_y7000_pg0_firmware

Vulnerable

legion_y7000_pg0

legion_y7000p_2019_firmware

Vulnerable

legion_y7000p_2019

legion_y7000p_pg0_firmware

Vulnerable

legion_y7000p_pg0

legion_y7000p-1060_firmware

Vulnerable

legion_y7000p-1060

legion_y730-15ich_firmware

Vulnerable

legion_y730-15ich

legion_y730-17ich_firmware

Vulnerable

legion_y730-17ich

legion_y740-15ichg_firmware

Vulnerable

legion_y740-15ichg

legion_y740-15irhg_firmware

Vulnerable

legion_y740-15irhg

legion_y740-17ichg_firmware

Vulnerable

legion_y740-17ichg

legion_y740-17irhg_firmware

Vulnerable

legion_y740-17irhg

legion_y9000k_2019_firmware

Vulnerable

legion_y9000k_2019

legion_y9000p_2019_firmware

Vulnerable

legion_y9000p_2019

lenovo_e41-25_firmware

Vulnerable

lenovo_v320-17ikb_firmware

Vulnerable

lenovo_v320-17ikb

lenovo_v720-14ikb_firmware

Vulnerable

lenovo_v720-14ikb

rescuer_y7000_firmware

Vulnerable

rescuer_y7000p_firmware

Vulnerable

rescuer_y7000p\(1060\)_firmware

Vulnerable

rescuer_y7000p\(1060\)

rescuer_y7000\(1060\)_firmware

Vulnerable

rescuer_y7000\(1060\)

s145-14_firmware

Vulnerable

s145-14igm_firmware

Vulnerable

s145-14ikb_firmware

Vulnerable

s145-14iwl_firmware

Vulnerable

s145-15igm_firmware

Vulnerable

s145-15ikb_firmware

Vulnerable

s145-15iwl_firmware

Vulnerable

s340-13iml_firmware

Vulnerable

s340-14_firmware

Vulnerable

s340-14api_firmware

Vulnerable

s340-14iil_firmware

Vulnerable

s340-14iml_firmware

Vulnerable

s340-14iwl_firmware

Vulnerable

s340-14iwl_touch_firmware

Vulnerable

s340-14iwl_touch

s340-15api_firmware

Vulnerable

s340-15iml_firmware

Vulnerable

s340-15iwl_firmware

Vulnerable

s340-15iwl_touch_firmware

Vulnerable

s340-15iwl_touch

s530-13iml_firmware

Vulnerable

s530-13iwl_firmware

Vulnerable

s540-14api_firmware

Vulnerable

s540-14iml_firmware

Vulnerable

s540-14iwl_firmware

Vulnerable

s540-14iwl_touch_firmware

Vulnerable

s540-14iwl_touch

s540-15iml_firmware

Vulnerable

s540-15iwl_firmware

Vulnerable

s540-15iwl_gtx_firmware

Vulnerable

s550-14iil_firmware

Vulnerable

v130-14ast_firmware

Vulnerable

v130-14igm_firmware

Vulnerable

v130-14ikb_firmware

Vulnerable

v130-15ast_firmware

Vulnerable

v145-14ast_firmware

Vulnerable

v145-15ast_firmware

Vulnerable

v320-14ikb_firmware

Vulnerable

v320-15ikb_firmware

Vulnerable

v320-17ikbr_firmware

Vulnerable

v330-14arr_firmware

Vulnerable

v330-14ast_firmware

Vulnerable

o

lenovo

v330-14igm_firmware

2

h

lenovo

v330-14igm

2

v330-14isk_firmware

Vulnerable

v330-15ast_firmware

Vulnerable

wei5-14ikb_firmware

Vulnerable

xiaoxin_air_13iwl_firmware

Vulnerable

xiaoxin_air_13iwl

xiaoxin_air_14arr_firmware

Vulnerable

xiaoxin_air_14arr

xiaoxin_air_14ikbr_firmware

Vulnerable

xiaoxin_air_14ikbr

xiaoxin_air_14iwl_firmware

Vulnerable

xiaoxin_air_14iwl

xiaoxin_air_15ikbr_firmware

Vulnerable

xiaoxin_air_15ikbr

xiaoxin_air_15iwl_firmware

Vulnerable

xiaoxin_air_15iwl

xiaoxin_air-14iwl_2019_firmware

Vulnerable

xiaoxin_air-14iwl_2019

xiaoxin_air-15iwl_2019_firmware

Vulnerable

xiaoxin_air-15iwl_2019

xiaoxin-13iml_firmware

Vulnerable

xiaoxin-14_2019iwl_firmware

Vulnerable

xiaoxin-14_2019iwl

xiaoxin-14igm_qc_2019_firmware

Vulnerable

xiaoxin-14igm_qc_2019

xiaoxin-14iwl_qc_2019_firmware

Vulnerable

xiaoxin-14iwl_qc_2019

xiaoxin-15_2019iwl_firmware

Vulnerable

xiaoxin-15_2019iwl

xx-14kb_qc_2019_firmware

Vulnerable

xx-14kb_qc_2019

y7000_2019_1050_firmware

Vulnerable

y7000_2019_1050

yoga_530-14arr_firmware

Vulnerable

yoga_720-12ikb_firmware

Vulnerable

yoga_730-13ikb_firmware

Vulnerable

yoga_730-13iwl_firmware

Vulnerable

yoga_730-15ikb_firmware

Vulnerable

yoga_730-15iwl_firmware

Vulnerable

yoga_c740-14iml_firmware

Vulnerable

yoga_c740-14iml

yoga_c740-15iml_firmware

Vulnerable

yoga_c740-15iml

yoga_c930-13ikb_firmware

Vulnerable

yoga_c930-13ikb

yoga_c930_glass_firmware

Vulnerable

yoga_c930_glass

yoga_c940_firmware

Vulnerable

yoga_s740-14iil_firmware

Vulnerable

yoga_s740-14iil

yoga_530-14ikb_firmware

Vulnerable

flex_6-1470_firmware

Vulnerable

zhaoyang_k42-80_firmware

Vulnerable

zhaoyang_k42-80

e43-80_kbl_firmware

Vulnerable

thinkstation_p410_firmware

Vulnerable

thinkstation_p410

thinkstation_p500_firmware

Vulnerable

thinkstation_p500

thinkstation_p510_firmware

Vulnerable

thinkstation_p510

thinkstation_p520_firmware

Vulnerable

thinkstation_p520

thinkstation_p520c_firmware

Vulnerable

thinkstation_p520c

thinkstation_p700_firmware

Vulnerable

thinkstation_p700

thinkstation_p710_firmware

Vulnerable

thinkstation_p710

thinkstation_p720_firmware

Vulnerable

thinkstation_p720

thinkstation_p900_firmware

Vulnerable

thinkstation_p900

thinkstation_p910_firmware

Vulnerable

thinkstation_p910

thinkstation_p920_firmware

Vulnerable

thinkstation_p920

References

https://support.lenovo.com/us/en/product_security/LEN-30042

Vendor Advisory

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2020-06-09T20:15:22.240

4 years ago

Last modified

2020-06-22T13:37:04.390

4 years ago