medium6.4
CVE-2020-8321
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow…
Impact
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 130-14ast Firmware | All versions |
| Lenovo | 130-14ikb Firmware | All versions |
| Lenovo | 130-15ast Firmware | All versions |
| Lenovo | 130-15ikb Firmware | All versions |
| Lenovo | 320c-15ikb Firmware | All versions |
| Lenovo | 330-14igm Firmware | All versions |
| Lenovo | 330-14ikb Firmware | All versions |
| Lenovo | 330-14ikbr Firmware | All versions |
| Lenovo | 330-15arr Firmware | All versions |
| Lenovo | 330-15arr Touch Firmware | All versions |
| Lenovo | 330-15ich Firmware | All versions |
| Lenovo | 330-15igm Firmware | All versions |