{"containers": {"cna": {"affected": [{"product": "BIOS", "vendor": "Lenovo", "versions": [{"status": "affected", "version": "various"}]}], "credits": [{"lang": "en", "value": "Lenovo thanks yngwei (@yngweijw), driedfish (@d3af1sh), and MengHao, Li of IIE VARAS"}], "datePublic": "2020-06-09T00:00:00", "descriptions": [{"lang": "en", "value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "Arbitrary code execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-06-09T19:50:35", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.lenovo.com/us/en/product_security/LEN-30042"}], "solutions": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042."}], "source": {"advisory": "LEN-30042", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "DATE_PUBLIC": "2020-06-09T18:00:00.000Z", "ID": "CVE-2020-8322", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "BIOS", "version": {"version_data": [{"version_affected": "=", "version_value": "various"}]}}]}, "vendor_name": "Lenovo"}]}}, "credit": [{"lang": "eng", "value": "Lenovo thanks yngwei (@yngweijw), driedfish (@d3af1sh), and MengHao, Li of IIE VARAS"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Arbitrary code execution"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/product_security/LEN-30042", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-30042"}]}, "solution": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042."}], "source": {"advisory": "LEN-30042", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2020-8322", "datePublished": "2020-06-09T00:00:00", "dateReserved": "2020-01-28T00:00:00", "dateUpdated": "2020-06-09T19:50:35", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:330-14ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "56FE5B32-75DE-4B6C-AE16-F0E6C53E597B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:330-14ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "2F2FD289-0806-453F-9C25-081F03EFE472", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:330-15ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8DE07DF-F99E-4C3D-B419-B94B253AC975", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:330-15ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE39466F-1CB3-4765-9046-326B537F6E8C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:330-17ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8D19A24-314A-49F6-95B0-AC5019EB4615", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:330-17ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EA2D865-B9F3-42B3-9DC8-3229070B4A16", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:340c-15api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9890D590-5B52-4F9D-8B67-8E1AE963B215", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:340c-15api:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E2094A-5DA7-4092-8883-5336CC49DF34", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:340c-15ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A299C60-7E2A-43FE-9543-965101779CD9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:340c-15ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FFB3701-9E57-4855-92BA-16E041AA72EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:720s_touch-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1F60A4E-E17D-46E7-8D50-DF0B06C5680F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:720s_touch-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "0783CEE8-5F46-4202-939F-A1EB64A6A478", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:720s-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3DCA2F68-379C-4226-B037-E164680E8147", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:720s-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "6A4DE87E-D456-4159-8BB7-7E5CA85D1AA6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:730s-13iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6672EAA-8FC9-4FF8-986C-7626508AB1D5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:730s-13iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7A27774-FD25-4130-892C-6AE75A542A66", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:c640-iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B994323E-0CA4-4ED1-927A-A7368DE56870", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:c640-iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7FD5526-EAC0-410A-9998-6DA8B720750C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:e42-80_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C50453DC-316F-49DA-ADC9-80A998001332", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:e42-80:-:*:*:*:*:*:*:*", "matchCriteriaId": "8BF8E48C-FAB2-4A60-9B1B-D57037143333", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:e52-80_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E456321-859A-452E-814A-4153901B1F83", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:e52-80:-:*:*:*:*:*:*:*", "matchCriteriaId": "4562F004-C782-4008-BA89-4A1DF8432A53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:k22-80_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C906749-923A-4D4D-8BC0-8212F44F2192", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:k22-80:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A3F698A-4F3D-45E6-A165-9C6F4DB82EDB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v720-12_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC125087-8B1E-4410-B233-84BB1F58B21F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v720-12:-:*:*:*:*:*:*:*", "matchCriteriaId": "B620BDE2-D81B-44B3-BB05-8D347292B1D6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:k32-80_kbl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C00BA0F4-8B16-4BE9-AF64-4401F20B5C1E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:k32-80_kbl:-:*:*:*:*:*:*:*", "matchCriteriaId": "A95D6E01-FE00-41BA-8A96-67965865C722", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:k32-80_skl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "40F32D11-1071-4607-B711-4844DDD225FD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:k32-80_skl:-:*:*:*:*:*:*:*", "matchCriteriaId": "29EAA0B1-67BE-4078-8CE2-5931F1404D18", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:miix_720-12ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "92C1CA51-3C0D-4806-A835-A89A524CE0DE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0E7697B-53B4-4A2A-B285-0620962A0E4A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s145-14api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D16E122F-BF66-4AA2-8EF5-370A94DF9595", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9DB47E5-C95F-47A7-9933-4268604E9206", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s145-14ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1FBF2C5-6087-471D-BA7B-1FB78487EB0D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "20926D68-C98C-4EB7-845B-734F04DCA188", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s145-15api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4E1ED00-3E84-4DF8-95A5-07FAB1994985", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:*", "matchCriteriaId": "81997EBD-A28F-4AF8-BD43-97E6410C6C31", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s145-15ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "85AC1215-7032-47ED-A57A-4A08564EA9CC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "349E6BC0-8FFC-431C-905A-68FF16BBAA86", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s540-13api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D56F68B-B3B4-4675-8A19-822F5FC8CAE9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2E0C8E4-DB00-4722-A985-2258FA1F725F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s750-iil_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6078CF6B-4594-4CCF-BB0C-5DD33AD25E7F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s750-iil:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F498545-62D1-4661-99D2-210667FB5EDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s940-14iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CB234AC-4797-420B-8A99-B09AAAF2A0CB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s940-14iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "015D275C-E6A0-4659-BC05-22D54D5CB777", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkbook_13s-iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AD2AA3A-9BCE-427E-BBAB-AB9EE0DFD46A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkbook_13s-iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E9B441F-C9A3-4B8F-A98A-E5893785AFC1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkbook_14s-iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B6719F8-5BAA-45BD-ADC2-2A397D3CC00B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkbook_14s-iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFBD07D7-140F-4BA4-8024-1370DA42FC18", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v110-14ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E9244BD6-E1BE-4FE4-80EE-4EC7F7DD76D5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v110-14ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "26BCF011-60AC-4CA9-B6F9-BC149FCF3BB4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v110-14ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "97B9239E-79B4-4D31-ABC2-6747EC6676F4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v110-14ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "514A866F-99DD-46ED-A615-C08C880C9695", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v110-15ast_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "197E1CD9-DE16-4E20-B55C-7BA3E136C8E2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v110-15ast:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6ADEA57-77BD-4D58-8B26-08C49D52E11D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v130-15igm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD79628A-52FD-46F7-A756-B26C61F9F36E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v130-15igm:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5053055-975C-4074-A9BA-BEB2E055DDEE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v130-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8801CAA7-4677-4263-9AFE-A45271F41D2E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "E32DEE9B-A1C0-4679-BDE3-21E57977443F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v310-15igm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04AC466C-D28A-4420-AACA-249711CEE41B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v310-15igm:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6636D55-E926-470B-A0A0-3E8EFD0ABCED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v330-15igm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA59509C-9970-40FB-BADB-E96C481200BB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v330-15igm:-:*:*:*:*:*:*:*", "matchCriteriaId": "018037E5-FBB5-4B50-AC0C-CE99EAE992DF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v330-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C185C13-B791-40ED-B8B8-D654EFFAE804", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v330-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "E62FBC6C-7CE6-4143-8E20-A53EBCDA760B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v330-15isk_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B6561DCB-6CEA-4E92-A517-EBB32B60C594", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v330-15isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "7536DC2F-CCB1-4BF5-A04B-412A35DB1302", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v340-iil_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B54A7B9F-3C07-41EC-897A-B307D04B666A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v340-iil:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF76D65D-0536-426A-92B2-E2174418AB86", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v340-iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A99E97DD-4F23-4BD3-8F8F-0DA2F71AE4D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v340-iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB74D8C1-2F53-48C4-BAFB-A4E0975A2852", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v540s-13_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "76576FA2-0462-45AF-B976-97A64E7F9683", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v540s-13:-:*:*:*:*:*:*:*", "matchCriteriaId": "76326110-A7A0-420A-BC56-A52B264AC17A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:14iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE6CE2C6-2A68-41FB-80AE-576120A073FC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:14iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C220C1A-1E78-4D21-A74C-2B84926F3942", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v730-13ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F35E5B-A909-48F8-8F10-652D22848F25", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v730-13ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8354DDE-5D70-4DD9-ACAC-8922DDCDAA82", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v730-13isk_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B90D36B6-A425-496D-9A55-D87F229068E3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v730-13isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ADB441D-403E-4DE3-82C0-D1922FF1189E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v730-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "017D2D92-8BF6-49A1-A770-E5BC2764DA74", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v730-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "3842B65A-2AD1-4ABE-92B4-E57F68D78C08", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:wei5-15ikb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCB60D7F-42C3-4A34-8DAD-2EE023F4FF15", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:wei5-15ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FE21972-49EF-4461-883C-48AF91BE6F83", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:xiaoxin_14-ast_qc_2019_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D3C0034-E5DF-4F53-9362-5FDE809EFFCA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:xiaoxin_14-ast_qc_2019:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CBE475E-CCD5-46DC-B50F-BB5702AA493F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:xx-14api_qc_2019_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FADC85C3-A2B5-44AC-965B-06612C65B7C0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:xx-14api_qc_2019:-:*:*:*:*:*:*:*", "matchCriteriaId": "419DA5F0-AE30-4FDC-9221-C7F983DE6B6A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_s730-13iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF92A651-B0F1-45E7-BFBC-5D459C6E84A0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_s730-13iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEF95829-DCF4-4843-BBBE-34B9575441E4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_s940-14iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F02E247-7E1D-4D0D-B6CC-7EE4F806BD9B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_s940-14iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "00821048-9198-4A78-8275-B6BA81D2B0EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:6_pro-13-iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA3360F5-2823-408F-BDC1-E5A947331474", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:6_pro-13-iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "3948CEE3-2DA5-463A-8B84-05508C2EAE1F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:6_pro-14-iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EA86337-A2D0-45E9-BC37-53949538E076", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:6_pro-14-iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "13AD79FC-AE4C-4591-B6A6-F90B2582E0E7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:e53-80_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "991F5766-082F-4BBD-91E9-7DD7CBB1FF14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:e53-80:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7017F21-1FD5-4540-941B-6FA7B2176625", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:k3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6046E78F-B75A-45DF-A4A6-97B6A64CDEB1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:k3:-:*:*:*:*:*:*:*", "matchCriteriaId": "59DFE5B1-02D7-4AF4-B0E6-B3CA8E67DC7C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:k4-iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D9A5BDAF-7BFF-40CA-BA05-9595349C4969", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:k4-iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "34525951-C949-46F8-B300-9E49113C1B7D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution."}, {"lang": "es", "value": "Una potencial vulnerabilidad en la funci\u00f3n de devoluci\u00f3n de llamada SMI usada en el controlador Legacy USB en algunos modelos Lenovo Notebook y ThinkStation, puede permitir una ejecuci\u00f3n de c\u00f3digo arbitraria"}], "id": "CVE-2020-8322", "lastModified": "2020-06-17T16:08:51.307", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "psirt@lenovo.com", "type": "Secondary"}]}, "published": "2020-06-09T20:15:22.350", "references": [{"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/LEN-30042"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}