PT-2020-20099 · Ibm+1 · Ibm System X+1

Published 2020-10-14 · Updated 2020-10-29 · CVE-2020-8332

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo and IBM System x servers (affected versions not specified)

Description A potential issue in the SMI callback function used in the legacy BIOS mode USB drivers may allow arbitrary code execution. This issue does not affect servers operating in UEFI mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2020-8332

Affected Products

Ibm System X

Lenovo System X

References · 3

• https://support.lenovo.com/us/en/product_security/LEN-38625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8332 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8332 · Vendor Advisory