MEDIUM🇵🇱 Wersja polska

CVE-2020-8337

CVSS 6.7v3.1pub. 2020-06-09upd. 2024-11-21

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo 5 15ikb

    HW
    Lenovo
    all versions

  • Lenovo Air 14 2019

    HW
    Lenovo
    all versions

  • Lenovo C340 14iwl

    HW
    Lenovo
    all versions

  • Lenovo Flex 14iwl

    HW
    Lenovo
    all versions

  • Lenovo S540 14iwl

    HW
    Lenovo
    all versions

  • Lenovo S540 14iwl Touch

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 13

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad A275

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad A285

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad A475

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad A485

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E455

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E460

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E465

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E470

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E475

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E480

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E485

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E490

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E490s

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E540

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E545

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E555

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E560

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E565

    HW
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2019-18619HIGH7.8same product

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all ver...

CVE-2017-3767HIGH7.8same product

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1....

CVE-2017-3756HIGH7.8same product

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems ve...

CVE-2022-4575MEDIUM6.7same product

A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad ...