medium6.4
CVE-2020-8332
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitr…
Impact
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Bladecenter Hs23 Firmware | before tke170b |
| Lenovo | Bladecenter Hs23e Firmware | before ahe172b |
| Lenovo | Compute Node-X440 Firmware | before cge128a |
| Lenovo | Flex System X220 Firmware | before kse170b |
| Lenovo | Flex System X240 Firmware | before b2e172b |
| Lenovo | Flex System X440 Firmware | before cne172b |
| Lenovo | Nextscale Nx360 M4 Firmware | before fhe132b |
| Lenovo | System X3300 M4 Firmware | before yae166b |
| Lenovo | System X3500 M4 Firmware | before y5e170b |
| Lenovo | System X3530 M4 Firmware | before bee174b |
| Lenovo | System X3550 M4 Firmware | before d7e174b |
| Lenovo | System X3630 M4 Firmware | before bee174b |