Code injection

2020-06-0920:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

CPENameOperatorVersion
thinkstation_p410_firmwareeq< s0kya7a
thinkstation_p500_firmwareeq< a4kt67a
thinkstation_p510_firmwareeq< s0kya7a
thinkstation_p520_firmwareeq< 202091
thinkstation_p520c_firmwareeq< 202091
thinkstation_p700_firmwareeq< a5kta7a
thinkstation_p710_firmwareeq< s1kt67a
thinkstation_p720_firmwareeq< 202091
thinkstation_p900_firmwareeq< a6kta7a
thinkstation_p910_firmwareeq< s2kt67a

Name	Operator	Version
thinkstation_p410_firmware	eq	< s0kya7a
thinkstation_p500_firmware	eq	< a4kt67a
thinkstation_p510_firmware	eq	< s0kya7a
thinkstation_p520_firmware	eq	< 202091
thinkstation_p520c_firmware	eq	< 202091
thinkstation_p700_firmware	eq	< a5kta7a
thinkstation_p710_firmware	eq	< s1kt67a
thinkstation_p720_firmware	eq	< 202091
thinkstation_p900_firmware	eq	< a6kta7a
thinkstation_p910_firmware	eq	< s2kt67a