CVE-2020-8332

Published Oct 14, 2020 CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Description
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.

Remediation

Vendor Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-38625.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-29199 A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Aug 4, 2024, 9:56 AM
Reserved
Jan 28, 2020, 12:00 AM
Status
Modified
Published
Oct 14, 2020, 10:15 PM
Modified
Jun 17, 2026, 3:26 AM