CVE-2020-8333
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo...
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
- Record
CVE-2020-8333- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2020-29200
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
- Record
EUVD-2020-29200- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2vg7-q8hg-5f79 No score
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo...
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
- Record
GHSA-2vg7-q8hg-5f79- Updated
- 2026-11-02
NVD
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
- Record
CVE-2020-8333- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
- lenovo 63 firmware
- lenovo bios
- lenovo h50-30g firmware
- lenovo m4500 firmware
- lenovo m4550 firmware
- lenovo qitian 4500 firmware
- lenovo qitian b4550 firmware
- lenovo qitian m4550 firmware
- lenovo thinkcentre e73 firmware
- lenovo thinkcentre e73s firmware
- lenovo thinkcentre e93 firmware
- lenovo thinkcentre m4500k firmware
Show 16 moreShow less
- lenovo thinkcentre m4500q firmware
- lenovo thinkcentre m4500s firmware
- lenovo thinkcentre m4500t firmware
- lenovo thinkcentre m9350z firmware
- lenovo thinkcentre m93z firmware
- lenovo thinkstation c30 firmware
- lenovo thinkstation d30 firmware
- lenovo thinkstation e32 firmware
- lenovo thinkstation p300 firmware
- lenovo thinkstation s30 firmware
- lenovo yangtian afh81 firmware
- lenovo yangtian mc h81 firmware
- lenovo yangtian mf h81 pci firmware
- lenovo yangtian tc h81 pci firmware
- lenovo yangtian wcc h81 pci firmware
- lenovo yangtian wf h81 pci firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8333 is a medium vulnerability (CVSS 6.4) in Lenovo 63 Firmware, published September 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.