CVEvulnerability

CVE-2020-8333

7.8 HIGH Published 2020-09-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution

Affected configurations

• lenovo 63 firmware (< fckt98a) • lenovo h50-30g firmware (< fckt98a) • lenovo m4500 firmware (< fckt98a) • lenovo m4550 firmware (< fckt98a) • lenovo qitian 4500 firmware (< fckt98a) • lenovo qitian b4550 firmware (< fckt98a) • lenovo qitian m4550 firmware (< fckt98a) • lenovo thinkcentre e73 firmware (< fckt98a) • lenovo thinkcentre e73s firmware (< fckt98a) • lenovo thinkcentre e93 firmware (< fbktdea) • lenovo thinkcentre m4500k firmware (< fckt98a) • lenovo thinkcentre m4500q firmware (< fhkt85a) • lenovo thinkcentre m4500t firmware (< fckt98a) • lenovo thinkcentre m4500s firmware (< fckt98a) • lenovo yangtian afh81 firmware (< fckt98a) • lenovo yangtian mc h81 firmware (< fckt98a) • lenovo yangtian mf h81 pci firmware (< fckt98a) • lenovo yangtian wf h81 pci firmware (< fckt98a) • lenovo yangtian tc h81 pci firmware (< fckt98a) • lenovo yangtian wcc h81 pci firmware (< fckt98a) • lenovo thinkcentre m9350z firmware (< fekta2a) • lenovo thinkcentre m93z firmware (< fekta2a) • lenovo thinkstation c30 firmware (< a3kt70a) • lenovo thinkstation d30 firmware (< a3kt70a) • lenovo thinkstation e32 firmware (< fbktdea) • lenovo thinkstation p300 firmware (< a2kt70a) • lenovo thinkstation s30 firmware (< a2kt70a)

References