A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Lenovo
Subscribe
|
14iwl
Subscribe
14iwl Firmware
Subscribe
330-14ast
Subscribe
330-14ast Firmware
Subscribe
330-15ast
Subscribe
330-15ast Firmware
Subscribe
330-17ast
Subscribe
330-17ast Firmware
Subscribe
340c-15api
Subscribe
340c-15api Firmware
Subscribe
340c-15ast
Subscribe
340c-15ast Firmware
Subscribe
6 Pro-13-iwl
Subscribe
6 Pro-13-iwl Firmware
Subscribe
6 Pro-14-iwl
Subscribe
6 Pro-14-iwl Firmware
Subscribe
720s-15ikb
Subscribe
720s-15ikb Firmware
Subscribe
720s Touch-15ikb
Subscribe
720s Touch-15ikb Firmware
Subscribe
730s-13iwl
Subscribe
730s-13iwl Firmware
Subscribe
C640-iml
Subscribe
C640-iml Firmware
Subscribe
E42-80
Subscribe
E42-80 Firmware
Subscribe
E52-80
Subscribe
E52-80 Firmware
Subscribe
E53-80
Subscribe
E53-80 Firmware
Subscribe
K22-80
Subscribe
K22-80 Firmware
Subscribe
K3
Subscribe
K32-80 Kbl
Subscribe
K32-80 Kbl Firmware
Subscribe
K32-80 Skl
Subscribe
K32-80 Skl Firmware
Subscribe
K3 Firmware
Subscribe
K4-iwl
Subscribe
K4-iwl Firmware
Subscribe
Miix 720-12ikb
Subscribe
Miix 720-12ikb Firmware
Subscribe
S145-14api
Subscribe
S145-14api Firmware
Subscribe
S145-14ast
Subscribe
S145-14ast Firmware
Subscribe
S145-15api
Subscribe
S145-15api Firmware
Subscribe
S145-15ast
Subscribe
S145-15ast Firmware
Subscribe
S540-13api
Subscribe
S540-13api Firmware
Subscribe
S750-iil
Subscribe
S750-iil Firmware
Subscribe
S940-14iwl
Subscribe
S940-14iwl Firmware
Subscribe
Thinkbook 13s-iwl
Subscribe
Thinkbook 13s-iwl Firmware
Subscribe
Thinkbook 14s-iwl
Subscribe
Thinkbook 14s-iwl Firmware
Subscribe
V110-14ast
Subscribe
V110-14ast Firmware
Subscribe
V110-14ikb
Subscribe
V110-14ikb Firmware
Subscribe
V110-15ast
Subscribe
V110-15ast Firmware
Subscribe
V130-15igm
Subscribe
V130-15igm Firmware
Subscribe
V130-15ikb
Subscribe
V130-15ikb Firmware
Subscribe
V310-15igm
Subscribe
V310-15igm Firmware
Subscribe
V330-15igm
Subscribe
V330-15igm Firmware
Subscribe
V330-15ikb
Subscribe
V330-15ikb Firmware
Subscribe
V330-15isk
Subscribe
V330-15isk Firmware
Subscribe
V340-iil
Subscribe
V340-iil Firmware
Subscribe
V340-iml
Subscribe
V340-iml Firmware
Subscribe
V540s-13
Subscribe
V540s-13 Firmware
Subscribe
V720-12
Subscribe
V720-12 Firmware
Subscribe
V730-13ikb
Subscribe
V730-13ikb Firmware
Subscribe
V730-13isk
Subscribe
V730-13isk Firmware
Subscribe
V730-15ikb
Subscribe
V730-15ikb Firmware
Subscribe
Wei5-15ikb
Subscribe
Wei5-15ikb Firmware
Subscribe
Xiaoxin 14-ast Qc 2019
Subscribe
Xiaoxin 14-ast Qc 2019 Firmware
Subscribe
Xx-14api Qc 2019
Subscribe
Xx-14api Qc 2019 Firmware
Subscribe
Yoga S730-13iwl
Subscribe
Yoga S730-13iwl Firmware
Subscribe
Yoga S940-14iwl
Subscribe
Yoga S940-14iwl Firmware
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-29189 | A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. |
Fixes
Solution
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-30042 |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: lenovo
Published:
Updated: 2024-09-16T20:52:30.716Z
Reserved: 2020-01-28T00:00:00
Link: CVE-2020-8322
No data.
Status : Modified
Published: 2020-06-09T20:15:22.350
Modified: 2024-11-21T05:38:42.490
Link: CVE-2020-8322
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD