Lucene search

[email protected]CVE-2020-8333

HistorySep 24, 2020 - 9:15 p.m.

CVE-2020-8333

2020-09-2421:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-8333

vulnerability

smi callback function

eeprom driver

lenovo desktops

thinkstation

arbitrary code execution

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution

CPENameOperatorVersion
lenovo:63_firmwarelenovo 63 firmwareltfckt98a
lenovo:h50-30g_firmwarelenovo h50-30g firmwareltfckt98a
lenovo:m4500_firmwarelenovo m4500 firmwareltfckt98a
lenovo:m4550_firmwarelenovo m4550 firmwareltfckt98a
lenovo:qitian_4500_firmwarelenovo qitian 4500 firmwareltfckt98a
lenovo:qitian_b4550_firmwarelenovo qitian b4550 firmwareltfckt98a
lenovo:qitian_m4550_firmwarelenovo qitian m4550 firmwareltfckt98a
lenovo:thinkcentre_e73_firmwarelenovo thinkcentre e73 firmwareltfckt98a
lenovo:thinkcentre_e73s_firmwarelenovo thinkcentre e73s firmwareltfckt98a
lenovo:thinkcentre_e93_firmwarelenovo thinkcentre e93 firmwareltfbktdea

CPE	Name	Operator	Version
lenovo:63_firmware	lenovo 63 firmware	lt	fckt98a
lenovo:h50-30g_firmware	lenovo h50-30g firmware	lt	fckt98a
lenovo:m4500_firmware	lenovo m4500 firmware	lt	fckt98a
lenovo:m4550_firmware	lenovo m4550 firmware	lt	fckt98a
lenovo:qitian_4500_firmware	lenovo qitian 4500 firmware	lt	fckt98a
lenovo:qitian_b4550_firmware	lenovo qitian b4550 firmware	lt	fckt98a
lenovo:qitian_m4550_firmware	lenovo qitian m4550 firmware	lt	fckt98a
lenovo:thinkcentre_e73_firmware	lenovo thinkcentre e73 firmware	lt	fckt98a
lenovo:thinkcentre_e73s_firmware	lenovo thinkcentre e73s firmware	lt	fckt98a
lenovo:thinkcentre_e93_firmware	lenovo thinkcentre e93 firmware	lt	fbktdea

Rows per page:

1-10 of 271

References

support.lenovo.com/us/en/product_security/LEN-30042

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2020-8333

prion1 lenovo1