CVE-2020-8333

published 2020-09-24

CVE-2020-8333: A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code…

Priority P3 39 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution

Affected

28 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	63_firmware	< fckt98a	fckt98a
lenovo	bios	—	—
lenovo	h50-30g_firmware	< fckt98a	fckt98a
lenovo	m4500_firmware	< fckt98a	fckt98a
lenovo	m4550_firmware	< fckt98a	fckt98a
lenovo	qitian_4500_firmware	< fckt98a	fckt98a
lenovo	qitian_b4550_firmware	< fckt98a	fckt98a
lenovo	qitian_m4550_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_e73_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_e73s_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_e93_firmware	< fbktdea	fbktdea
lenovo	thinkcentre_m4500k_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_m4500q_firmware	< fhkt85a	fhkt85a
lenovo	thinkcentre_m4500s_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_m4500t_firmware	< fckt98a	fckt98a
lenovo	thinkcentre_m9350z_firmware	< fekta2a	fekta2a
lenovo	thinkcentre_m93z_firmware	< fekta2a	fekta2a
lenovo	thinkstation_c30_firmware	< a3kt70a	a3kt70a
lenovo	thinkstation_d30_firmware	< a3kt70a	a3kt70a
lenovo	thinkstation_e32_firmware	< fbktdea	fbktdea
lenovo	thinkstation_p300_firmware	< a2kt70a	a2kt70a
lenovo	thinkstation_s30_firmware	< a2kt70a	a2kt70a
lenovo	yangtian_afh81_firmware	< fckt98a	fckt98a
lenovo	yangtian_mc_h81_firmware	< fckt98a	fckt98a
lenovo	yangtian_mf_h81_pci_firmware	< fckt98a	fckt98a

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.2 HIGH AV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.