A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

Project Subscriptions

Vendors Products
14iwl Firmware Subscribe
330-14ast Subscribe
330-14ast Firmware Subscribe
330-15ast Subscribe
330-15ast Firmware Subscribe
330-17ast Subscribe
330-17ast Firmware Subscribe
340c-15api Subscribe
340c-15api Firmware Subscribe
340c-15ast Subscribe
340c-15ast Firmware Subscribe
6 Pro-13-iwl Subscribe
6 Pro-13-iwl Firmware Subscribe
6 Pro-14-iwl Subscribe
6 Pro-14-iwl Firmware Subscribe
720s-15ikb Subscribe
720s-15ikb Firmware Subscribe
720s Touch-15ikb Subscribe
720s Touch-15ikb Firmware Subscribe
730s-13iwl Subscribe
730s-13iwl Firmware Subscribe
C640-iml Subscribe
C640-iml Firmware Subscribe
E42-80 Firmware Subscribe
E52-80 Firmware Subscribe
E53-80 Firmware Subscribe
K22-80 Firmware Subscribe
K32-80 Kbl Subscribe
K32-80 Kbl Firmware Subscribe
K32-80 Skl Subscribe
K32-80 Skl Firmware Subscribe
K3 Firmware Subscribe
K4-iwl Firmware Subscribe
Miix 720-12ikb Subscribe
Miix 720-12ikb Firmware Subscribe
S145-14api Subscribe
S145-14api Firmware Subscribe
S145-14ast Subscribe
S145-14ast Firmware Subscribe
S145-15api Subscribe
S145-15api Firmware Subscribe
S145-15ast Subscribe
S145-15ast Firmware Subscribe
S540-13api Subscribe
S540-13api Firmware Subscribe
S750-iil Subscribe
S750-iil Firmware Subscribe
S940-14iwl Subscribe
S940-14iwl Firmware Subscribe
Thinkbook 13s-iwl Subscribe
Thinkbook 13s-iwl Firmware Subscribe
Thinkbook 14s-iwl Subscribe
Thinkbook 14s-iwl Firmware Subscribe
V110-14ast Subscribe
V110-14ast Firmware Subscribe
V110-14ikb Subscribe
V110-14ikb Firmware Subscribe
V110-15ast Subscribe
V110-15ast Firmware Subscribe
V130-15igm Subscribe
V130-15igm Firmware Subscribe
V130-15ikb Subscribe
V130-15ikb Firmware Subscribe
V310-15igm Subscribe
V310-15igm Firmware Subscribe
V330-15igm Subscribe
V330-15igm Firmware Subscribe
V330-15ikb Subscribe
V330-15ikb Firmware Subscribe
V330-15isk Subscribe
V330-15isk Firmware Subscribe
V340-iil Subscribe
V340-iil Firmware Subscribe
V340-iml Subscribe
V340-iml Firmware Subscribe
V540s-13 Subscribe
V540s-13 Firmware Subscribe
V720-12 Subscribe
V720-12 Firmware Subscribe
V730-13ikb Subscribe
V730-13ikb Firmware Subscribe
V730-13isk Subscribe
V730-13isk Firmware Subscribe
V730-15ikb Subscribe
V730-15ikb Firmware Subscribe
Wei5-15ikb Subscribe
Wei5-15ikb Firmware Subscribe
Xiaoxin 14-ast Qc 2019 Subscribe
Xiaoxin 14-ast Qc 2019 Firmware Subscribe
Xx-14api Qc 2019 Subscribe
Xx-14api Qc 2019 Firmware Subscribe
Yoga S730-13iwl Subscribe
Yoga S730-13iwl Firmware Subscribe
Yoga S940-14iwl Subscribe
Yoga S940-14iwl Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-29189 A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Fixes

Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-09-16T20:52:30.716Z

Reserved: 2020-01-28T00:00:00

Link: CVE-2020-8322

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-06-09T20:15:22.350

Modified: 2024-11-21T05:38:42.490

Link: CVE-2020-8322

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses