CVE-2020-8321: Lenovo 130-14ast Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

Affected products

• Lenovo 130-14ast Firmware: affected versions not specified
• Lenovo 130-14ikb Firmware: affected versions not specified
• Lenovo 130-15ast Firmware: affected versions not specified
• Lenovo 130-15ikb Firmware: affected versions not specified
• Lenovo 320c-15ikb Firmware: affected versions not specified
• Lenovo 330-14igm Firmware: affected versions not specified
• Lenovo 330-14ikb Firmware: affected versions not specified
• Lenovo 330-14ikbr Firmware: affected versions not specified
• Lenovo 330-15arr Firmware: affected versions not specified
• Lenovo 330-15arr Touch Firmware: affected versions not specified
• Lenovo 330-15ich Firmware: affected versions not specified
• Lenovo 330-15igm Firmware: affected versions not specified
• Lenovo 330-15ikb Firmware: affected versions not specified
• Lenovo 330-15ikbr Firmware: affected versions not specified
• Lenovo 330-15ikbr Touch Firmware: affected versions not specified
• Lenovo 330-17ich Firmware: affected versions not specified
• Lenovo 330-17ikb Firmware: affected versions not specified
• Lenovo 330-17ikbr Firmware: affected versions not specified
• Lenovo 330c-14ikb Firmware: affected versions not specified
• Lenovo 330c-15ikb Firmware: affected versions not specified
• Lenovo 330c-15ikbr Firmware: affected versions not specified
• Lenovo 340c-15igm Firmware: affected versions not specified
• Lenovo 340c-15ikb Firmware: affected versions not specified
• Lenovo 340c-15iwl Firmware: affected versions not specified
• Lenovo 530s-14arr Firmware: affected versions not specified
• and 147 more

Published 2020-06-09. Last modified 2026-06-17.