330 14Ast Firmware
CVE-2020-8323
MEDIUM
2020-06-09
psirt@lenovo.com
RCE
Lenovo
330 14Ast Firmware
330 15Ast Firmware
330 17Ast Firmware
340C 15Api Firmware
340C 15Ast Firmware
720S Touch 15Ikb Firmware
720S 15Ikb Firmware
730S 13Iwl Firmware
C640 Iml Firmware
E42 80 Firmware
E52 80 Firmware
K22 80 Firmware
V720 12 Firmware
K32 80 Kbl Firmware
K32 80 Skl Firmware
Miix 720 12Ikb Firmware
S145 14Api Firmware
S145 14Ast Firmware
S145 15Api Firmware
S145 15Ast Firmware
S540 13Api Firmware
S750 Iil Firmware
S940 14Iwl Firmware
Thinkbook 13S Iwl Firmware
Thinkbook 14S Iwl Firmware
V110 14Ast Firmware
V110 14Ikb Firmware
V110 15Ast Firmware
V130 15Igm Firmware
V130 15Ikb Firmware
V310 15Igm Firmware
V330 15Igm Firmware
V330 15Ikb Firmware
V330 15Isk Firmware
V340 Iil Firmware
V340 Iml Firmware
V540S 13 Firmware
14Iwl Firmware
V730 13Ikb Firmware
V730 13Isk Firmware
V730 15Ikb Firmware
Wei5 15Ikb Firmware
Xiaoxin 14 Ast Qc 2019 Firmware
Xx 14Api Qc 2019 Firmware
Yoga S730 13Iwl Firmware
Yoga S940 14Iwl Firmware
6 Pro 13 Iwl Firmware
6 Pro 14 Iwl Firmware
E53 80 Firmware
K3 Firmware
K4 Iwl Firmware
Thinkpad 11E Yoga Gen 6 Firmware
Thinkpad 11E Firmware
Thinkpad Yoga 11E 3Rd Gen Firmware
Thinkpad Yoga 11E 4Th Gen Firmware
Thinkpad Yoga 11E 5Th Gen Firmware
Thinkpad 13 2Nd Gen Firmware
Thinkpad 13 Firmware
Thinkpad A275 Firmware
Thinkpad A285 Firmware
Thinkpad A475 Firmware
Thinkpad A485 Firmware
Thinkpad E14 Firmware
Thinkpad E15 Firmware
Thinkpad R14 Firmware
Thinkpad S3 Gen 2 Firmware
Thinkpad E455 Firmware
Thinkpad E555 Firmware
Thinkpad E460 Firmware
Thinkpad E560 Firmware
Thinkpad E465 Firmware
Thinkpad E565 Firmware
Thinkpad E470 Firmware
Thinkpad E570 Firmware
Thinkpad E475 Firmware
Thinkpad E575 Firmware
Thinkpad E480 Firmware
Thinkpad E580 Firmware
Thinkpad E485 Firmware
Thinkpad E585 Firmware
Thinkpad E490S Firmware
Thinkpad S3 Firmware
Thinkpad E490 Firmware
Thinkpad E590 Firmware
Thinkpad R490 Firmware
Thinkpad R590 Firmware
Thinkpad L13 Firmware
Thinkpad L1415 Firmware
Thinkpad L380 Firmware
Thinkpad S3 3Rd Gen Firmware
Thinkpad L380 Yoga Firmware
Thinkpad S2 Yoga 3Rd Gen Firmware
Thinkpad L390 Yoga Firmware
Thinkpad S2 Yoga 4Th Gen Firmware
Thinkpad L460 Firmware
Thinkpad L470 Firmware
Thinkpad L480 Firmware
Thinkpad L580 Firmware
Thinkpad L490 Firmware
Thinkpad L590 Firmware
Thinkpad L560 Firmware
Thinkpad L570 Firmware
Thinkpad P1 Firmware
Thinkpad P43S Firmware
Thinkpad P50 Firmware
Thinkpad P50S Firmware
Thinkpad P51 Firmware
Thinkpad P51S Firmware
Thinkpad P52 Firmware
Thinkpad P52S Firmware
Thinkpad P53 Firmware
Thinkpad P53S Firmware
Thinkpad P70 Firmware
Thinkpad P71 Firmware
Thinkpad P72 Firmware
Thinkpad P73 Firmware
Thinkpad S5 2Nd Gen Firmware
Thinkpad S5 Firmware
Thinkpad E560P Firmware
Thinkpad T25 Firmware
Thinkpad T460 Firmware
Thinkpad T460P Firmware
Thinkpad T460S Firmware
Thinkpad T470 Firmware
Thinkpad T470P Firmware
Thinkpad T470S Firmware
Thinkpad T480 Firmware
Thinkpad T480S Firmware
Thinkpad T490 Firmware
Thinkpad T490S Firmware
Thinkpad T560 Firmware
Thinkpad T570 Firmware
Thinkpad T580 Firmware
Thinkpad T590 Firmware
Thinkpad X1 Carbon Firmware
Thinkpad X1 Yoga Firmware
Thinkpad X1 Extreme Firmware
Thinkpad X1 Tablet Firmware
Thinkpad X260 Firmware
Thinkpad X270 Firmware
Thinkpad X280 Firmware
Thinkpad X380 Yoga Firmware
Thinkpad X390 Firmware
Thinkpad X390 Yoga Firmware
Thinkpad X395 Firmware
Thinkpad Yoga 260 Firmware
Thinkpad S1 Firmware
Thinkpad Yoga 370 Firmware
Thinkpad S1 3Rd Firmware
Thinkpad T495 Firmware
Thinkpad T495S Firmware
Thinkpad Helix Firmware
Thinkpad S1 Yoga Firmware
Thinkpad S1 Yoga Vpro Firmware
Thinkpad S5 Yoga 15 Firmware
Thinkpad S540 Firmware
Thinkpad T440 Firmware
Thinkpad T440S Firmware
Thinkpad T440P Firmware
Thinkpad T540 Firmware
Thinkpad T540P Firmware
Thinkpad T550 Firmware
Thinkpad W540 Firmware
Thinkpad W541 Firmware
Thinkpad W550S Firmware
Thinkpad X1 Carbon 20Ax Firmware
Thinkpad X1 Carbon 20Bx Firmware
Thinkpad X140E Firmware
Thinkpad X240 Firmware
Thinkpad X240S Firmware
Thinkpad X250 Firmware
Thinkpad Yoga 11E 20Dx Firmware
6.7
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
6.7
MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
1
CVE Published
Jun 09, 2020 - 20:15 nvd
MEDIUM 6.7
DescriptionNVD
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
AnalysisAI
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Affected products include: Lenovo 330-14Ast Firmware, Lenovo 330-15Ast Firmware, Lenovo 330-17Ast Firmware, Lenovo 340C-15Api Firmware, Lenovo 340C-15Ast Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in 330 14Ast Firmware
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).