PT-2020-20091 · Lenovo · Lenovo System Interface Foundation

Published 2020-04-14 · Updated 2020-04-15 · CVE-2020-8324

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.2.184.31

Description A vulnerability was reported that could allow unsigned DLL files to be executed.

Recommendations For versions prior to 1.2.184.31, update to version 1.2.184.31 or later to resolve the issue.

Fix

Improper Verification of Cryptographic Signature

RCE

Weakness Enumeration

CWE-347

CWE-20

Related Identifiers

CVE-2020-8324

Affected Products

Lenovo System Interface Foundation

References · 3

• https://osv.dev/vulnerability/CVE-2020-8324 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/LEN-30401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8324 · Security Note