CVE-2020-8322: Lenovo 14iwl Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

Affected products

• Lenovo 14iwl Firmware: affected versions not specified
• Lenovo 330-14ast Firmware: affected versions not specified
• Lenovo 330-15ast Firmware: affected versions not specified
• Lenovo 330-17ast Firmware: affected versions not specified
• Lenovo 340c-15api Firmware: affected versions not specified
• Lenovo 340c-15ast Firmware: affected versions not specified
• Lenovo 6 Pro-13-Iwl Firmware: affected versions not specified
• Lenovo 6 Pro-14-Iwl Firmware: affected versions not specified
• Lenovo 720s-15ikb Firmware: affected versions not specified
• Lenovo 720s Touch-15ikb Firmware: affected versions not specified
• Lenovo 730s-13iwl Firmware: affected versions not specified
• Lenovo c640-Iml Firmware: affected versions not specified
• Lenovo e42-80 Firmware: affected versions not specified
• Lenovo e52-80 Firmware: affected versions not specified
• Lenovo e53-80 Firmware: affected versions not specified
• Lenovo k22-80 Firmware: affected versions not specified
• Lenovo k32-80 Kbl Firmware: affected versions not specified
• Lenovo k32-80 Skl Firmware: affected versions not specified
• Lenovo k3 Firmware: affected versions not specified
• Lenovo k4-Iwl Firmware: affected versions not specified
• Lenovo Miix 720-12ikb Firmware: affected versions not specified
• Lenovo s145-14api Firmware: affected versions not specified
• Lenovo s145-14ast Firmware: affected versions not specified
• Lenovo s145-15api Firmware: affected versions not specified
• Lenovo s145-15ast Firmware: affected versions not specified
• and 26 more

Published 2020-06-09. Last modified 2026-06-17.