CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
lenovoCNA
6.4 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
lenovo330-14ast_firmware
-
lenovo330-15ast_firmware
-
lenovo330-17ast_firmware
-
lenovo340c-15api_firmware
-
lenovo340c-15ast_firmware
-
lenovo720s_touch-15ikb_firmware
-
lenovo720s-15ikb_firmware
-
lenovo730s-13iwl_firmware
-
lenovoc640-iml_firmware
-
lenovoe42-80_firmware
-
lenovoe52-80_firmware
-
lenovok22-80_firmware
-
lenovov720-12_firmware
-
lenovok32-80_kbl_firmware
-
lenovok32-80_skl_firmware
-
lenovomiix_720-12ikb_firmware
-
lenovos145-14api_firmware
-
lenovos145-14ast_firmware
-
lenovos145-15api_firmware
-
lenovos145-15ast_firmware
-
lenovos540-13api_firmware
-
lenovos750-iil_firmware
-
lenovos940-14iwl_firmware
-
lenovothinkbook_13s-iwl_firmware
-
lenovothinkbook_14s-iwl_firmware
-
lenovov110-14ast_firmware
-
lenovov110-14ikb_firmware
-
lenovov110-15ast_firmware
-
lenovov130-15igm_firmware
-
lenovov130-15ikb_firmware
-
lenovov310-15igm_firmware
-
lenovov330-15igm_firmware
-
lenovov330-15ikb_firmware
-
lenovov330-15isk_firmware
-
lenovov340-iil_firmware
-
lenovov340-iml_firmware
-
lenovov540s-13_firmware
-
lenovo14iwl_firmware
-
lenovov730-13ikb_firmware
-
lenovov730-13isk_firmware
-
lenovov730-15ikb_firmware
-
lenovowei5-15ikb_firmware
-
lenovoxiaoxin_14-ast_qc_2019_firmware
-
lenovoxx-14api_qc_2019_firmware
-
lenovoyoga_s730-13iwl_firmware
-
lenovoyoga_s940-14iwl_firmware
-
lenovo6_pro-13-iwl_firmware
-
lenovo6_pro-14-iwl_firmware
-
lenovoe53-80_firmware
-
lenovok3_firmware
-
lenovok4-iwl_firmware
-
lenovothinkpad_11e_yoga_gen_6_firmware
𝑥
< 2020-07-10
lenovothinkpad_11e_firmware
𝑥
< 2020-07-10
lenovothinkpad_yoga_11e_3rd_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_yoga_11e_4th_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_yoga_11e_5th_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_13_2nd_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_13_firmware
𝑥
< 2020-07-10
lenovothinkpad_a275_firmware
𝑥
< 2020-07-10
lenovothinkpad_a285_firmware
𝑥
< 2020-07-10
lenovothinkpad_a475_firmware
𝑥
< 2020-07-10
lenovothinkpad_a485_firmware
𝑥
< 2020-07-10
lenovothinkpad_e14_firmware
𝑥
< 2020-07-10
lenovothinkpad_e15_firmware
𝑥
< 2020-07-10
lenovothinkpad_r14_firmware
𝑥
< 2020-07-10
lenovothinkpad_s3_gen_2_firmware
𝑥
< 2020-07-10
lenovothinkpad_e455_firmware
𝑥
< 2020-07-10
lenovothinkpad_e555_firmware
𝑥
< 2020-07-10
lenovothinkpad_e460_firmware
𝑥
< 2020-07-10
lenovothinkpad_e560_firmware
𝑥
< 2020-07-10
lenovothinkpad_e465_firmware
𝑥
< 2020-07-10
lenovothinkpad_e565_firmware
𝑥
< 2020-07-10
lenovothinkpad_e470_firmware
𝑥
< 2020-07-10
lenovothinkpad_e570_firmware
𝑥
< 2020-07-10
lenovothinkpad_e475_firmware
𝑥
< 2020-07-10
lenovothinkpad_e575_firmware
𝑥
< 2020-07-10
lenovothinkpad_e480_firmware
𝑥
< 2020-07-10
lenovothinkpad_e580_firmware
𝑥
< 2020-07-10
lenovothinkpad_e485_firmware
𝑥
< 2020-07-10
lenovothinkpad_e585_firmware
𝑥
< 2020-07-10
lenovothinkpad_e490s_firmware
𝑥
< 2020-07-10
lenovothinkpad_s3_firmware
𝑥
< 2020-07-10
lenovothinkpad_e490_firmware
𝑥
< 2020-07-10
lenovothinkpad_e590_firmware
𝑥
< 2020-07-10
lenovothinkpad_r490_firmware
𝑥
< 2020-07-10
lenovothinkpad_r590_firmware
𝑥
< 2020-07-10
lenovothinkpad_l13_firmware
𝑥
< 2020-07-10
lenovothinkpad_l1415_firmware
𝑥
< 2020-07-10
lenovothinkpad_l380_firmware
𝑥
< 2020-07-10
lenovothinkpad_s3_3rd_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_l380_yoga_firmware
𝑥
< 2020-07-10
lenovothinkpad_s2_yoga_3rd_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_l390_yoga_firmware
𝑥
< 2020-07-10
lenovothinkpad_s2_yoga_4th_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_l460_firmware
𝑥
< 2020-07-10
lenovothinkpad_l470_firmware
𝑥
< 2020-07-10
lenovothinkpad_l480_firmware
𝑥
< 2020-07-10
lenovothinkpad_l580_firmware
𝑥
< 2020-07-10
lenovothinkpad_l490_firmware
𝑥
< 2020-07-10
lenovothinkpad_l590_firmware
𝑥
< 2020-07-10
lenovothinkpad_l560_firmware
𝑥
< 2020-07-03
lenovothinkpad_l570_firmware
𝑥
< 2020-07-10
lenovothinkpad_p50_firmware
𝑥
< 2020-07-17
lenovothinkpad_p50s_firmware
𝑥
< 2020-07-24
lenovothinkpad_p51_firmware
𝑥
< 2020-07-03
lenovothinkpad_p51s_firmware
𝑥
< 2020-07-03
lenovothinkpad_p52s_firmware
𝑥
< 2020-07-03
lenovothinkpad_p70_firmware
𝑥
< 2020-07-17
lenovothinkpad_p71_firmware
𝑥
≤ 2020-07-17
lenovothinkpad_s5_2nd_gen_firmware
𝑥
< 2020-07-10
lenovothinkpad_s5_firmware
𝑥
< 2020-07-10
lenovothinkpad_e560p_firmware
𝑥
< 2020-07-10
lenovothinkpad_t460_firmware
𝑥
< 2020-07-10
lenovothinkpad_t460p_firmware
𝑥
< 2020-07-10
lenovothinkpad_t460s_firmware
𝑥
< 2020-06-19
lenovothinkpad_t470p_firmware
𝑥
< 2020-07-10
lenovothinkpad_t560_firmware
𝑥
< 2020-07-24
lenovothinkpad_t570_firmware
𝑥
< 2020-07-03
lenovothinkpad_t580_firmware
𝑥
< 2020-07-03
lenovothinkpad_x1_yoga_firmware
𝑥
< 2020-07-17
lenovothinkpad_x1_tablet_firmware
𝑥
< 2020-07-24
lenovothinkpad_x1_yoga_firmware
𝑥
< 2020-07-17
lenovothinkpad_x260_firmware
𝑥
< 2020-07-10
lenovothinkpad_x270_firmware
𝑥
< 2020-07-10
lenovothinkpad_x380_yoga_firmware
𝑥
< 2020-07-10
lenovothinkpad_x390_firmware
𝑥
< 2020-07-07
lenovothinkpad_x390_yoga_firmware
𝑥
< 2020-06-24
lenovothinkpad_x395_firmware
𝑥
< 2020-07-10
lenovothinkpad_yoga_260_firmware
𝑥
< 2020-07-07
lenovothinkpad_s1_firmware
𝑥
< 2020-07-07
lenovothinkpad_yoga_370_firmware
𝑥
< 2020-07-10
lenovothinkpad_s1_3rd_firmware
𝑥
< 2020-07-10
lenovothinkpad_t495_firmware
𝑥
< 2020-07-10
lenovothinkpad_t495s_firmware
𝑥
< 2020-07-10
𝑥
= Vulnerable software versions
References
https://support.lenovo.com/us/en/product_security/LEN-30042
https://support.lenovo.com/us/en/product_security/LEN-30042