medium6.4
CVE-2020-8323
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow…
Impact
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 330-14ast Firmware | All versions |
| Lenovo | 330-15ast Firmware | All versions |
| Lenovo | 330-17ast Firmware | All versions |
| Lenovo | 340c-15api Firmware | All versions |
| Lenovo | 340c-15ast Firmware | All versions |
| Lenovo | 720s Touch-15ikb Firmware | All versions |
| Lenovo | 720s-15ikb Firmware | All versions |
| Lenovo | 730s-13iwl Firmware | All versions |
| Lenovo | C640-Iml Firmware | All versions |
| Lenovo | E42-80 Firmware | All versions |
| Lenovo | E52-80 Firmware | All versions |
| Lenovo | K22-80 Firmware | All versions |