CVE-2020-8333

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@lenovo.com

Published

2020-09-24

Last modified

2024-09-16

Affected products

• 63 Firmware (Lenovo)
• Bios (Lenovo)
• H50-30g Firmware (Lenovo)
• M4500 Firmware (Lenovo)
• M4550 Firmware (Lenovo)
• Qitian 4500 Firmware (Lenovo)
• Qitian B4550 Firmware (Lenovo)
• Qitian M4550 Firmware (Lenovo)
• Thinkcentre E73 Firmware (Lenovo)
• Thinkcentre E73s Firmware (Lenovo)
• Thinkcentre E93 Firmware (Lenovo)
• Thinkcentre M4500k Firmware (Lenovo)
• Thinkcentre M4500q Firmware (Lenovo)
• Thinkcentre M4500s Firmware (Lenovo)
• Thinkcentre M4500t Firmware (Lenovo)
• Thinkcentre M9350z Firmware (Lenovo)
• Thinkcentre M93z Firmware (Lenovo)
• Thinkstation C30 Firmware (Lenovo)
• Thinkstation D30 Firmware (Lenovo)
• Thinkstation E32 Firmware (Lenovo)
• Thinkstation P300 Firmware (Lenovo)
• Thinkstation S30 Firmware (Lenovo)
• Yangtian Afh81 Firmware (Lenovo)
• Yangtian Mc H81 Firmware (Lenovo)
• Yangtian Mf H81 Pci Firmware (Lenovo)
• Yangtian Tc H81 Pci Firmware (Lenovo)
• Yangtian Wcc H81 Pci Firmware (Lenovo)
• Yangtian Wf H81 Pci Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-30042