CVE Feed

    Dashboard / CVE / CVE-2020-8337

    CVE-2020-8337

    An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

    Published:Jun 9, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 9, 2020
    EPSS Score:0.00046
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    5-15ikb
    Vendor
    Lenovo
    Product
    Air-14 2019
    Vendor
    Lenovo
    Product
    C340-14iwl
    Vendor
    Lenovo
    Product
    Flex-14iwl
    Vendor
    Lenovo
    Product
    S540-14iwl
    Vendor
    Lenovo
    Product
    S540-14iwl Touch
    Vendor
    Lenovo
    Product
    Thinkpad 11e
    Vendor
    Lenovo
    Product
    Thinkpad 13
    Vendor
    Lenovo
    Product
    Thinkpad A275
    Vendor
    Lenovo
    Product
    Thinkpad A285
    Vendor
    Lenovo
    Product
    Thinkpad A475
    Vendor
    Lenovo
    Product
    Thinkpad A485
    Vendor
    Lenovo
    Product
    Thinkpad E450
    Vendor
    Lenovo
    Product
    Thinkpad E450c
    Vendor
    Lenovo
    Product
    Thinkpad E455
    Vendor
    Lenovo
    Product
    Thinkpad E460
    Vendor
    Lenovo
    Product
    Thinkpad E465
    Vendor
    Lenovo
    Product
    Thinkpad E470
    Vendor
    Lenovo
    Product
    Thinkpad E475
    Vendor
    Lenovo
    Product
    Thinkpad E480
    Vendor
    Lenovo
    Product
    Thinkpad E485
    Vendor
    Lenovo
    Product
    Thinkpad E490
    Vendor
    Lenovo
    Product
    Thinkpad E490s
    Vendor
    Lenovo
    Product
    Thinkpad E540
    Vendor
    Lenovo
    Product
    Thinkpad E545
    Vendor
    Lenovo
    Product
    Thinkpad E550
    Vendor
    Lenovo
    Product
    Thinkpad E550c
    Vendor
    Lenovo
    Product
    Thinkpad E555
    Vendor
    Lenovo
    Product
    Thinkpad E560
    Vendor
    Lenovo
    Product
    Thinkpad E565
    Vendor
    Lenovo
    Product
    Thinkpad E570
    Vendor
    Lenovo
    Product
    Thinkpad E575
    Vendor
    Lenovo
    Product
    Thinkpad E580
    Vendor
    Lenovo
    Product
    Thinkpad E585
    Vendor
    Lenovo
    Product
    Thinkpad E590
    Vendor
    Lenovo
    Product
    Thinkpad Edge E440
    Vendor
    Lenovo
    Product
    Thinkpad Edge E445
    Vendor
    Lenovo
    Product
    Thinkpad L380
    Vendor
    Lenovo
    Product
    Thinkpad L380 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad L390 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad L440
    Vendor
    Lenovo
    Product
    Thinkpad L450
    Vendor
    Lenovo
    Product
    Thinkpad L460
    Vendor
    Lenovo
    Product
    Thinkpad L470
    Vendor
    Lenovo
    Product
    Thinkpad L480
    Vendor
    Lenovo
    Product
    Thinkpad L540
    Vendor
    Lenovo
    Product
    Thinkpad L580
    Vendor
    Lenovo
    Product
    Thinkpad P1
    Vendor
    Lenovo
    Product
    Thinkpad P40
    Vendor
    Lenovo
    Product
    Thinkpad P53
    Vendor
    Lenovo
    Product
    Thinkpad P73
    Vendor
    Lenovo
    Product
    Thinkpad R490
    Vendor
    Lenovo
    Product
    Thinkpad R590
    Vendor
    Lenovo
    Product
    Thinkpad S1 3rd
    Vendor
    Lenovo
    Product
    Thinkpad S1 Yoga 12
    Vendor
    Lenovo
    Product
    Thinkpad S2 Yoga 3rd Gen
    Vendor
    Lenovo
    Product
    Thinkpad S2 Yoga 4th Gen
    Vendor
    Lenovo
    Product
    Thinkpad S3
    Vendor
    Lenovo
    Product
    Thinkpad S3-s440
    Vendor
    Lenovo
    Product
    Thinkpad S3 3rd Gen
    Vendor
    Lenovo
    Product
    Thinkpad S3 Yoga 14
    Vendor
    Lenovo
    Product
    Thinkpad S5
    Vendor
    Lenovo
    Product
    Thinkpad T450
    Vendor
    Lenovo
    Product
    Thinkpad T450s
    Vendor
    Lenovo
    Product
    Thinkpad T460
    Vendor
    Lenovo
    Product
    Thinkpad T460p
    Vendor
    Lenovo
    Product
    Thinkpad T470p
    Vendor
    Lenovo
    Product
    Thinkpad X1 Extreme
    Vendor
    Lenovo
    Product
    Thinkpad X260
    Vendor
    Lenovo
    Product
    Thinkpad X270
    Vendor
    Lenovo
    Product
    Thinkpad X380 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e 3rd Gen
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e 4th Gen
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e 5th Gen
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 14 460 S3
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 370
    Vendor
    Lenovo
    Product
    V130-15igm
    Vendor
    Lenovo
    Product
    V130-15ikb
    Vendor
    Lenovo
    Product
    V310-15igm
    Vendor
    Lenovo
    Product
    V330-15igm
    Vendor
    Lenovo
    Product
    Yoga 14
    Vendor
    Synaptics
    Product
    Smart Audio Uwp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-428 Unquoted Search Path or Element

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High