CVE-2020-8322 (GCVE-0-2020-8322)
Vulnerability from cvelistv5 – Published: 2020-06-09 19:50 – Updated: 2024-09-16 20:52
VLAI
EPSS
VEX
Summary
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Severity
6.4 (Medium)
CWE
- Arbitrary code execution
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://support.lenovo.com/us/en/product_security… | x_refsource_MISC |
Date Public
2020-06-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T09:56:28.318Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-30042"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Lenovo thanks yngwei (@yngweijw), driedfish (@d3af1sh), and MengHao, Li of IIE VARAS"
}
],
"datePublic": "2020-06-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Arbitrary code execution",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-06-09T19:50:35.000Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-30042"
}
],
"solutions": [
{
"lang": "en",
"value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042."
}
],
"source": {
"advisory": "LEN-30042",
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@lenovo.com",
"DATE_PUBLIC": "2020-06-09T18:00:00.000Z",
"ID": "CVE-2020-8322",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BIOS",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "various"
}
]
}
}
]
},
"vendor_name": "Lenovo"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Lenovo thanks yngwei (@yngweijw), driedfish (@d3af1sh), and MengHao, Li of IIE VARAS"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Arbitrary code execution"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.lenovo.com/us/en/product_security/LEN-30042",
"refsource": "MISC",
"url": "https://support.lenovo.com/us/en/product_security/LEN-30042"
}
]
},
"solution": [
{
"lang": "en",
"value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042."
}
],
"source": {
"advisory": "LEN-30042",
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2020-8322",
"datePublished": "2020-06-09T19:50:35.842Z",
"dateReserved": "2020-01-28T00:00:00.000Z",
"dateUpdated": "2024-09-16T20:52:30.716Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-8322",
"date": "2026-09-22",
"epss": "0.00327",
"percentile": "0.26068"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:330-14ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "56FE5B32-75DE-4B6C-AE16-F0E6C53E597B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:330-14ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F2FD289-0806-453F-9C25-081F03EFE472",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:330-15ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E8DE07DF-F99E-4C3D-B419-B94B253AC975",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:330-15ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BE39466F-1CB3-4765-9046-326B537F6E8C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:330-17ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E8D19A24-314A-49F6-95B0-AC5019EB4615",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:330-17ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2EA2D865-B9F3-42B3-9DC8-3229070B4A16",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:340c-15api_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9890D590-5B52-4F9D-8B67-8E1AE963B215",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:340c-15api:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1E2094A-5DA7-4092-8883-5336CC49DF34",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:340c-15ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9A299C60-7E2A-43FE-9543-965101779CD9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:340c-15ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7FFB3701-9E57-4855-92BA-16E041AA72EE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:720s_touch-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1F60A4E-E17D-46E7-8D50-DF0B06C5680F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:720s_touch-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0783CEE8-5F46-4202-939F-A1EB64A6A478",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:720s-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3DCA2F68-379C-4226-B037-E164680E8147",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:720s-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6A4DE87E-D456-4159-8BB7-7E5CA85D1AA6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:730s-13iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F6672EAA-8FC9-4FF8-986C-7626508AB1D5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:730s-13iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7A27774-FD25-4130-892C-6AE75A542A66",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:c640-iml_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B994323E-0CA4-4ED1-927A-A7368DE56870",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:c640-iml:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7FD5526-EAC0-410A-9998-6DA8B720750C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:e42-80_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C50453DC-316F-49DA-ADC9-80A998001332",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:e42-80:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8BF8E48C-FAB2-4A60-9B1B-D57037143333",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:e52-80_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1E456321-859A-452E-814A-4153901B1F83",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:e52-80:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4562F004-C782-4008-BA89-4A1DF8432A53",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:k22-80_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C906749-923A-4D4D-8BC0-8212F44F2192",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:k22-80:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5A3F698A-4F3D-45E6-A165-9C6F4DB82EDB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v720-12_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FC125087-8B1E-4410-B233-84BB1F58B21F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v720-12:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B620BDE2-D81B-44B3-BB05-8D347292B1D6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:k32-80_kbl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C00BA0F4-8B16-4BE9-AF64-4401F20B5C1E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:k32-80_kbl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A95D6E01-FE00-41BA-8A96-67965865C722",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:k32-80_skl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40F32D11-1071-4607-B711-4844DDD225FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:k32-80_skl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "29EAA0B1-67BE-4078-8CE2-5931F1404D18",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:miix_720-12ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92C1CA51-3C0D-4806-A835-A89A524CE0DE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0E7697B-53B4-4A2A-B285-0620962A0E4A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s145-14api_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D16E122F-BF66-4AA2-8EF5-370A94DF9595",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9DB47E5-C95F-47A7-9933-4268604E9206",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s145-14ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1FBF2C5-6087-471D-BA7B-1FB78487EB0D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20926D68-C98C-4EB7-845B-734F04DCA188",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s145-15api_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D4E1ED00-3E84-4DF8-95A5-07FAB1994985",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:*",
"matchCriteriaId": "81997EBD-A28F-4AF8-BD43-97E6410C6C31",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s145-15ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "85AC1215-7032-47ED-A57A-4A08564EA9CC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "349E6BC0-8FFC-431C-905A-68FF16BBAA86",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s540-13api_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D56F68B-B3B4-4675-8A19-822F5FC8CAE9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E2E0C8E4-DB00-4722-A985-2258FA1F725F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s750-iil_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6078CF6B-4594-4CCF-BB0C-5DD33AD25E7F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s750-iil:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F498545-62D1-4661-99D2-210667FB5EDA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s940-14iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3CB234AC-4797-420B-8A99-B09AAAF2A0CB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s940-14iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "015D275C-E6A0-4659-BC05-22D54D5CB777",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_13s-iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9AD2AA3A-9BCE-427E-BBAB-AB9EE0DFD46A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_13s-iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E9B441F-C9A3-4B8F-A98A-E5893785AFC1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14s-iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9B6719F8-5BAA-45BD-ADC2-2A397D3CC00B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14s-iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFBD07D7-140F-4BA4-8024-1370DA42FC18",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v110-14ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E9244BD6-E1BE-4FE4-80EE-4EC7F7DD76D5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v110-14ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "26BCF011-60AC-4CA9-B6F9-BC149FCF3BB4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v110-14ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "97B9239E-79B4-4D31-ABC2-6747EC6676F4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v110-14ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "514A866F-99DD-46ED-A615-C08C880C9695",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v110-15ast_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "197E1CD9-DE16-4E20-B55C-7BA3E136C8E2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v110-15ast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D6ADEA57-77BD-4D58-8B26-08C49D52E11D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v130-15igm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AD79628A-52FD-46F7-A756-B26C61F9F36E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v130-15igm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5053055-975C-4074-A9BA-BEB2E055DDEE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v130-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8801CAA7-4677-4263-9AFE-A45271F41D2E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E32DEE9B-A1C0-4679-BDE3-21E57977443F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v310-15igm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "04AC466C-D28A-4420-AACA-249711CEE41B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v310-15igm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D6636D55-E926-470B-A0A0-3E8EFD0ABCED",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v330-15igm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AA59509C-9970-40FB-BADB-E96C481200BB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v330-15igm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "018037E5-FBB5-4B50-AC0C-CE99EAE992DF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v330-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C185C13-B791-40ED-B8B8-D654EFFAE804",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v330-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E62FBC6C-7CE6-4143-8E20-A53EBCDA760B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v330-15isk_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6561DCB-6CEA-4E92-A517-EBB32B60C594",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v330-15isk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7536DC2F-CCB1-4BF5-A04B-412A35DB1302",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v340-iil_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B54A7B9F-3C07-41EC-897A-B307D04B666A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v340-iil:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AF76D65D-0536-426A-92B2-E2174418AB86",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v340-iml_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A99E97DD-4F23-4BD3-8F8F-0DA2F71AE4D8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v340-iml:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB74D8C1-2F53-48C4-BAFB-A4E0975A2852",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v540s-13_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76576FA2-0462-45AF-B976-97A64E7F9683",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v540s-13:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76326110-A7A0-420A-BC56-A52B264AC17A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:14iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BE6CE2C6-2A68-41FB-80AE-576120A073FC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:14iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5C220C1A-1E78-4D21-A74C-2B84926F3942",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v730-13ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "66F35E5B-A909-48F8-8F10-652D22848F25",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v730-13ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C8354DDE-5D70-4DD9-ACAC-8922DDCDAA82",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v730-13isk_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B90D36B6-A425-496D-9A55-D87F229068E3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v730-13isk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5ADB441D-403E-4DE3-82C0-D1922FF1189E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v730-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "017D2D92-8BF6-49A1-A770-E5BC2764DA74",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v730-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3842B65A-2AD1-4ABE-92B4-E57F68D78C08",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:wei5-15ikb_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CCB60D7F-42C3-4A34-8DAD-2EE023F4FF15",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:wei5-15ikb:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2FE21972-49EF-4461-883C-48AF91BE6F83",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:xiaoxin_14-ast_qc_2019_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D3C0034-E5DF-4F53-9362-5FDE809EFFCA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:xiaoxin_14-ast_qc_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5CBE475E-CCD5-46DC-B50F-BB5702AA493F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:xx-14api_qc_2019_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FADC85C3-A2B5-44AC-965B-06612C65B7C0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:xx-14api_qc_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "419DA5F0-AE30-4FDC-9221-C7F983DE6B6A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_s730-13iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AF92A651-B0F1-45E7-BFBC-5D459C6E84A0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_s730-13iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EEF95829-DCF4-4843-BBBE-34B9575441E4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_s940-14iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F02E247-7E1D-4D0D-B6CC-7EE4F806BD9B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_s940-14iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "00821048-9198-4A78-8275-B6BA81D2B0EE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:6_pro-13-iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AA3360F5-2823-408F-BDC1-E5A947331474",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:6_pro-13-iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3948CEE3-2DA5-463A-8B84-05508C2EAE1F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:6_pro-14-iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3EA86337-A2D0-45E9-BC37-53949538E076",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:6_pro-14-iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "13AD79FC-AE4C-4591-B6A6-F90B2582E0E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:e53-80_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "991F5766-082F-4BBD-91E9-7DD7CBB1FF14",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:e53-80:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7017F21-1FD5-4540-941B-6FA7B2176625",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:k3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6046E78F-B75A-45DF-A4A6-97B6A64CDEB1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:k3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "59DFE5B1-02D7-4AF4-B0E6-B3CA8E67DC7C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:k4-iwl_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D9A5BDAF-7BFF-40CA-BA05-9595349C4969",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:k4-iwl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34525951-C949-46F8-B300-9E49113C1B7D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."
},
{
"lang": "es",
"value": "Una potencial vulnerabilidad en la funci\u00f3n de devoluci\u00f3n de llamada SMI usada en el controlador Legacy USB en algunos modelos Lenovo Notebook y ThinkStation, puede permitir una ejecuci\u00f3n de c\u00f3digo arbitraria"
}
],
"id": "CVE-2020-8322",
"lastModified": "2024-11-21T05:38:42.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.5,
"impactScore": 5.9,
"source": "psirt@lenovo.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-06-09T20:15:22.350",
"references": [
{
"source": "psirt@lenovo.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-30042"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-30042"
}
],
"sourceIdentifier": "psirt@lenovo.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
},
"redhat_vex": {
"current_release_date": "2026-02-24T01:34:54+00:00",
"cve": "CVE-2020-8322",
"id": "CVE-2020-8322",
"initial_release_date": "2020-06-09T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "CVE-2020-8322",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-8322.json",
"version": "3"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…