Code injection

2020-06-0920:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

CPENameOperatorVersion
thinkpad_11e_firmwareeq< 2020710
thinkpad_11e_yoga_gen_6_firmwareeq< 2020710
thinkpad_13_2nd_gen_firmwareeq< 2020710
thinkpad_13_firmwareeq< 2020710
thinkpad_a275_firmwareeq< 2020710
thinkpad_a285_firmwareeq< 2020710
thinkpad_a475_firmwareeq< 2020710
thinkpad_a485_firmwareeq< 2020710
thinkpad_e14_firmwareeq< 2020710
thinkpad_e15_firmwareeq< 2020710

Name	Operator	Version
thinkpad_11e_firmware	eq	< 2020710
thinkpad_11e_yoga_gen_6_firmware	eq	< 2020710
thinkpad_13_2nd_gen_firmware	eq	< 2020710
thinkpad_13_firmware	eq	< 2020710
thinkpad_a275_firmware	eq	< 2020710
thinkpad_a285_firmware	eq	< 2020710
thinkpad_a475_firmware	eq	< 2020710
thinkpad_a485_firmware	eq	< 2020710
thinkpad_e14_firmware	eq	< 2020710
thinkpad_e15_firmware	eq	< 2020710