CVE-2020-8321 — Lenovo Thinkstation P410 Firmware vulnerability

3 documents3 sources

Severity

6.7MEDIUMNVD

CNA6.4

EPSS

0.1%

top 66.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Lenovo Thinkstation P410 Firmware Lenovo Thinkstation P500 Firmware Lenovo Thinkstation P510 Firmware +9 more

Timeline

PublishedJun 9

Latest updateMay 24

Description

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages12 packages

▶NVDlenovo/thinkstation_p410_firmware< s00kya7a

▶NVDlenovo/thinkstation_p500_firmware< a4kt67a

▶NVDlenovo/thinkstation_p510_firmware< s00kya7a

▶NVDlenovo/thinkstation_p520_firmware< 2020-09-01

▶NVDlenovo/thinkstation_p700_firmware< a5kta7a

🔴Vulnerability Details

GHSA

GHSA-7939-9jcj-5hqr: A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models↗2022-05-24

▶

CVEList

CVE-2020-8321: A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models↗2020-06-09

▶