A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution
Published Jun 9, 2020
6.7
MEDIUMCVSS 3.1
EPSS 0.33%
Description
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Affected products
-
- Version variousStatusaffectedConstraints-
- Version
Configuration 1
- n/a
Configuration 2
- n/a
Configuration 3
- n/a
Configuration 4
- n/a
Running on/with
- n/a
Configuration 5
- n/a
Running on/with
- n/a
Configuration 6
- n/a
Running on/with
- n/a
Configuration 7
- n/a
Running on/with
- n/a
Configuration 8
- n/a
Running on/with
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Running on/with
- n/a
Configuration 15
- n/a
Running on/with
- n/a
Configuration 16
- n/a
Running on/with
- n/a
Configuration 17
- n/a
Running on/with
- n/a
Configuration 18
- n/a
Running on/with
- n/a
Configuration 19
- n/a
Running on/with
- n/a
Configuration 20
- n/a
Running on/with
- n/a
Configuration 21
- n/a
Running on/with
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Running on/with
- n/a
Configuration 24
- n/a
Running on/with
- n/a
Configuration 25
- n/a
Running on/with
- n/a
Configuration 26
- n/a
Running on/with
- n/a
Configuration 27
- n/a
Running on/with
- n/a
Configuration 28
- n/a
Running on/with
- n/a
Configuration 29
- n/a
Running on/with
- n/a
Configuration 30
- n/a
Running on/with
- n/a
Configuration 31
- n/a
Running on/with
- n/a
Configuration 32
- n/a
Running on/with
- n/a
Configuration 33
- n/a
Running on/with
- n/a
Configuration 34
- n/a
Running on/with
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
- n/a
Configuration 39
- n/a
Running on/with
- n/a
Configuration 40
- n/a
Running on/with
- n/a
Configuration 41
- n/a
Running on/with
- n/a
Configuration 42
- n/a
Running on/with
- n/a
Configuration 43
- n/a
Running on/with
- n/a
Configuration 44
- n/a
Running on/with
- n/a
Configuration 45
- n/a
Running on/with
- n/a
Configuration 46
- n/a
Running on/with
- n/a
Configuration 47
- n/a
Running on/with
- n/a
Configuration 48
- n/a
Running on/with
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-30042.
No CWE recorded.
References (1)
- https://support.lenovo.com/us/en/product_security/LEN-30042 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-30042 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.