130 14Ast Firmware
CVE-2020-8321
MEDIUM
2020-06-09
psirt@lenovo.com
RCE
Lenovo
130 14Ast Firmware
130 14Ikb Firmware
130 15Ast Firmware
130 15Ikb Firmware
320C 15Ikb Firmware
330 14Igm Firmware
330 14Ikb Firmware
330 14Ikbr Firmware
330 15Arr Firmware
330 15Arr Touch Firmware
330 15Ich Firmware
330 15Igm Firmware
330 15Ikb Firmware
330 15Ikbr Firmware
330 15Ikbr Touch Firmware
330 17Ich Firmware
330 17Ikb Firmware
330 17Ikbr Firmware
330C 14Ikb Firmware
330C 15Ikb Firmware
330C 15Ikbr Firmware
340C 15Igm Firmware
340C 15Ikb Firmware
340C 15Iwl Firmware
530S 14Iwl Firmware
530S 15Iwl Firmware
530S 14Arr Firmware
530S 14Ikb Firmware
530S 15Ikb Firmware
720S 13Arr Firmware
720S 14Ikbr Firmware
C340 14Api Firmware
C340 14Iml Firmware
C340 14Iwl Firmware
C340 15Iil Firmware
C340 15Iml Firmware
C340 15Iwl Firmware
D330 10Igm Firmware
D335 10Igm Firmware
E4 14Arr Firmware
Flex 6 14Arr Firmware
Flex 6 14Ikb Firmware
Flex 14Iwl Firmware
Flex 15Iwl Firmware
Ideapad 3 14 Firmware
Ideapad 3 15 Firmware
Ideapad 3 17Iml05 Firmware
Ideapad 3 15Iil05 Firmware
Ideapad 3 14Iil05 Firmware
Ideapad 5 15Iil05 Firmware
K43C 80 Firmware
L3 15Iml05 Firmware
L340 15Api Firmware
L340 15Api Touch Firmware
L340 15Irh Firmware
L340 15Iwl Touch Firmware
L340 17Api Firmware
L340 17Irh Firmware
L340 17Iwl Firmware
Legion Y530 15Ich Firmware
Legion Y530 15Ich 1060 Firmware
Legion Y540 15 Pg0 Firmware
Legion Y540 15Irh Firmware
Legion Y540 17 Pg0 Firmware
Legion Y540 17Irh Firmware
Legion Y545 Firmware
Legion Y545 Pg0 Firmware
Legion Y7000 2019 Firmware
Legion Y7000 Pg0 Firmware
Legion Y7000P 2019 Firmware
Legion Y7000P Pg0 Firmware
Legion Y7000P 1060 Firmware
Legion Y730 15Ich Firmware
Legion Y730 17Ich Firmware
Legion Y740 15Ichg Firmware
Legion Y740 15Irhg Firmware
Legion Y740 17Ichg Firmware
Legion Y740 17Irhg Firmware
Legion Y9000K 2019 Firmware
Legion Y9000P 2019 Firmware
Lenovo E41 25 Firmware
Lenovo V320 17Ikb Firmware
Lenovo V720 14Ikb Firmware
Rescuer Y7000 Firmware
Rescuer Y7000P Firmware
Rescuer Y7000P 1060 Firmware
Rescuer Y7000 1060 Firmware
S145 14 Firmware
S145 14Igm Firmware
S145 14Ikb Firmware
S145 14Iwl Firmware
S145 15Igm Firmware
S145 15Ikb Firmware
S145 15Iwl Firmware
S340 13Iml Firmware
S340 14 Firmware
S340 14Api Firmware
S340 14Iil Firmware
S340 14Iml Firmware
S340 14Iwl Firmware
S340 14Iwl Touch Firmware
S340 15Api Firmware
S340 15Iml Firmware
S340 15Iwl Firmware
S340 15Iwl Touch Firmware
S530 13Iml Firmware
S530 13Iwl Firmware
S540 14Api Firmware
S540 14Iml Firmware
S540 14Iwl Firmware
S540 14Iwl Touch Firmware
S540 15Iml Firmware
S540 15Iwl Firmware
S540 15Iwl Gtx Firmware
S550 14Iil Firmware
V130 14Ast Firmware
V130 14Igm Firmware
V130 14Ikb Firmware
V130 15Ast Firmware
V145 14Ast Firmware
V145 15Ast Firmware
V320 14Ikb Firmware
V320 15Ikb Firmware
V320 17Ikbr Firmware
V330 14Arr Firmware
V330 14Ast Firmware
V330 14Igm Firmware
V330 14Isk Firmware
V330 15Ast Firmware
Wei5 14Ikb Firmware
Xiaoxin Air 13Iwl Firmware
Xiaoxin Air 14Arr Firmware
Xiaoxin Air 14Ikbr Firmware
Xiaoxin Air 14Iwl Firmware
Xiaoxin Air 15Ikbr Firmware
Xiaoxin Air 15Iwl Firmware
Xiaoxin Air 14Iwl 2019 Firmware
Xiaoxin Air 15Iwl 2019 Firmware
Xiaoxin 13Iml Firmware
Xiaoxin 14 2019Iwl Firmware
Xiaoxin 14Igm Qc 2019 Firmware
Xiaoxin 14Iwl Qc 2019 Firmware
Xiaoxin 15 2019Iwl Firmware
Xx 14Kb Qc 2019 Firmware
Y7000 2019 1050 Firmware
Yoga 530 14Arr Firmware
Yoga 720 12Ikb Firmware
Yoga 730 13Ikb Firmware
Yoga 730 13Iwl Firmware
Yoga 730 15Ikb Firmware
Yoga 730 15Iwl Firmware
Yoga C740 14Iml Firmware
Yoga C740 15Iml Firmware
Yoga C930 13Ikb Firmware
Yoga C930 Glass Firmware
Yoga C940 Firmware
Yoga S740 14Iil Firmware
Yoga 530 14Ikb Firmware
Flex 6 1470 Firmware
Zhaoyang K42 80 Firmware
E43 80 Kbl Firmware
Thinkstation P410 Firmware
Thinkstation P500 Firmware
Thinkstation P510 Firmware
Thinkstation P520 Firmware
Thinkstation P520C Firmware
Thinkstation P700 Firmware
Thinkstation P710 Firmware
Thinkstation P720 Firmware
Thinkstation P900 Firmware
Thinkstation P910 Firmware
Thinkstation P920 Firmware
6.7
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
6.7
MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
1
CVE Published
Jun 09, 2020 - 20:15 nvd
MEDIUM 6.7
DescriptionNVD
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
AnalysisAI
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. Affected products include: Lenovo 130-14Ast Firmware, Lenovo 130-14Ikb Firmware, Lenovo 130-15Ast Firmware, Lenovo 130-15Ikb Firmware, Lenovo 320C-15Ikb Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).