CVE-2020-8333: Lenovo 63 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution

Affected products

  • Lenovo 63 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo h50-30g Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo m4500 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo m4550 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Qitian 4500 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Qitian b4550 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Qitian m4550 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre e73 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre e73s Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre e93 Firmware: before fbktdea (fixed in fbktdea)
  • Lenovo Thinkcentre m4500k Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre m4500q Firmware: before fhkt85a (fixed in fhkt85a)
  • Lenovo Thinkcentre m4500s Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre m4500t Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Thinkcentre m9350z Firmware: before fekta2a (fixed in fekta2a)
  • Lenovo Thinkcentre m93z Firmware: before fekta2a (fixed in fekta2a)
  • Lenovo Thinkstation c30 Firmware: before a3kt70a (fixed in a3kt70a)
  • Lenovo Thinkstation d30 Firmware: before a3kt70a (fixed in a3kt70a)
  • Lenovo Thinkstation e32 Firmware: before fbktdea (fixed in fbktdea)
  • Lenovo Thinkstation p300 Firmware: before a2kt70a (fixed in a2kt70a)
  • Lenovo Thinkstation s30 Firmware: before a2kt70a (fixed in a2kt70a)
  • Lenovo Yangtian AFH81 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Yangtian Mc h81 Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Yangtian MF h81 Pci Firmware: before fckt98a (fixed in fckt98a)
  • Lenovo Yangtian Tc h81 Pci Firmware: before fckt98a (fixed in fckt98a)
  • and 2 more

Published 2020-09-24. Last modified 2026-06-17.