CVEvulnerability
CVE-2020-8337
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-428
Description
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
Affected configurations
• synaptics smart audio uwp (< 1.0.83.0)
Related
Weakness · CWE (1)
- CWE-428 Unquoted Search Path or Element weakness
References
- https://support.lenovo.com/us/en/product_security/len-30707 Vendor Advisory
- https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf Vendor Advisory
- https://support.lenovo.com/us/en/product_security/len-30707 Vendor Advisory
- https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf Vendor Advisory