CoreCVE
Back

MEDIUM

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution

Published Oct 14, 2020

Description

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.

Affected products

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-38625.

Weaknesses (1)

CWE-367

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner lenovo
Published Oct 14, 2020
Updated Aug 4, 2024
Reserved Jan 28, 2020
Link CVE-2020-8332

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-8332

Red Hat

No data

ENISA EUVD

Assigner lenovo
Published Oct 14, 2020
Updated Aug 4, 2024
Link EUVD-2020-29199

GitHub

No data