CVE-2020-8322
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some...
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Record
CVE-2020-8322- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2020-29189
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Record
EUVD-2020-29189- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c66x-m3p5-hr84 No score
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some...
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Record
GHSA-c66x-m3p5-hr84- Updated
- 2026-11-02
NVD
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Record
CVE-2020-8322- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
Affected products
- lenovo 14iwl firmware
- lenovo 330-14ast firmware
- lenovo 330-15ast firmware
- lenovo 330-17ast firmware
- lenovo 340c-15api firmware
- lenovo 340c-15ast firmware
- lenovo 6 pro-13-iwl firmware
- lenovo 6 pro-14-iwl firmware
- lenovo 720s-15ikb firmware
- lenovo 720s touch-15ikb firmware
- lenovo 730s-13iwl firmware
- lenovo bios
Show 40 moreShow less
- lenovo c640-iml firmware
- lenovo e42-80 firmware
- lenovo e52-80 firmware
- lenovo e53-80 firmware
- lenovo k22-80 firmware
- lenovo k32-80 kbl firmware
- lenovo k32-80 skl firmware
- lenovo k3 firmware
- lenovo k4-iwl firmware
- lenovo miix 720-12ikb firmware
- lenovo s145-14api firmware
- lenovo s145-14ast firmware
- lenovo s145-15api firmware
- lenovo s145-15ast firmware
- lenovo s540-13api firmware
- lenovo s750-iil firmware
- lenovo s940-14iwl firmware
- lenovo thinkbook 13s-iwl firmware
- lenovo thinkbook 14s-iwl firmware
- lenovo v110-14ast firmware
- lenovo v110-14ikb firmware
- lenovo v110-15ast firmware
- lenovo v130-15igm firmware
- lenovo v130-15ikb firmware
- lenovo v310-15igm firmware
- lenovo v330-15igm firmware
- lenovo v330-15ikb firmware
- lenovo v330-15isk firmware
- lenovo v340-iil firmware
- lenovo v340-iml firmware
- lenovo v540s-13 firmware
- lenovo v720-12 firmware
- lenovo v730-13ikb firmware
- lenovo v730-13isk firmware
- lenovo v730-15ikb firmware
- lenovo wei5-15ikb firmware
- lenovo xiaoxin 14-ast qc 2019 firmware
- lenovo xx-14api qc 2019 firmware
- lenovo yoga s730-13iwl firmware
- lenovo yoga s940-14iwl firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8322 is a medium vulnerability (CVSS 6.4) in Lenovo 14iwl Firmware, published June 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.