7.2

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synaptics ≫ Smart Audio Uwp Version < 1.0.83.0
   Lenovo ≫ 5-15ikb Version-
   Lenovo ≫ Air-14 2019 Version-
   Lenovo ≫ C340-14iwl Version-
   Lenovo ≫ Flex-14iwl Version-
   Lenovo ≫ S540-14iwl Version-
   Lenovo ≫ S540-14iwl Touch Version-
   Lenovo ≫ Thinkpad 11e Version-
   Lenovo ≫ Thinkpad 13 Version-
   Lenovo ≫ Thinkpad A275 Version-
   Lenovo ≫ Thinkpad A285 Version-
   Lenovo ≫ Thinkpad A475 Version-
   Lenovo ≫ Thinkpad A485 Version-
   Lenovo ≫ Thinkpad E450 Version-
   Lenovo ≫ Thinkpad E450c Version-
   Lenovo ≫ Thinkpad E455 Version-
   Lenovo ≫ Thinkpad E460 Version-
   Lenovo ≫ Thinkpad E465 Version-
   Lenovo ≫ Thinkpad E470 Version-
   Lenovo ≫ Thinkpad E475 Version-
   Lenovo ≫ Thinkpad E480 Version-
   Lenovo ≫ Thinkpad E485 Version-
   Lenovo ≫ Thinkpad E490 Version-
   Lenovo ≫ Thinkpad E490s Version-
   Lenovo ≫ Thinkpad E540 Version-
   Lenovo ≫ Thinkpad E545 Version-
   Lenovo ≫ Thinkpad E550 Version-
   Lenovo ≫ Thinkpad E550c Version-
   Lenovo ≫ Thinkpad E555 Version-
   Lenovo ≫ Thinkpad E560 Version-
   Lenovo ≫ Thinkpad E565 Version-
   Lenovo ≫ Thinkpad E570 Version-
   Lenovo ≫ Thinkpad E575 Version-
   Lenovo ≫ Thinkpad E580 Version-
   Lenovo ≫ Thinkpad E585 Version-
   Lenovo ≫ Thinkpad E590 Version-
   Lenovo ≫ Thinkpad Edge E440 Version-
   Lenovo ≫ Thinkpad Edge E445 Version-
   Lenovo ≫ Thinkpad L380 Version-
   Lenovo ≫ Thinkpad L380 Yoga Version-
   Lenovo ≫ Thinkpad L390 Yoga Version-
   Lenovo ≫ Thinkpad L440 Version-
   Lenovo ≫ Thinkpad L450 Version-
   Lenovo ≫ Thinkpad L460 Version-
   Lenovo ≫ Thinkpad L470 Version-
   Lenovo ≫ Thinkpad L480 Version-
   Lenovo ≫ Thinkpad L540 Version-
   Lenovo ≫ Thinkpad L580 Version-
   Lenovo ≫ Thinkpad P1 Version-
   Lenovo ≫ Thinkpad P40 Version-
   Lenovo ≫ Thinkpad P53 Version-
   Lenovo ≫ Thinkpad P73 Version-
   Lenovo ≫ Thinkpad R490 Version-
   Lenovo ≫ Thinkpad R590 Version-
   Lenovo ≫ Thinkpad S1 3rd Version-
   Lenovo ≫ Thinkpad S1 Yoga 12 Version-
   Lenovo ≫ Thinkpad S2 Yoga 3rd Gen Version-
   Lenovo ≫ Thinkpad S2 Yoga 4th Gen Version-
   Lenovo ≫ Thinkpad S3 Version-
   Lenovo ≫ Thinkpad S3-s440 Version-
   Lenovo ≫ Thinkpad S3 3rd Gen Version-
   Lenovo ≫ Thinkpad S3 Yoga 14 Version-
   Lenovo ≫ Thinkpad S5 Version-
   Lenovo ≫ Thinkpad T450 Version-
   Lenovo ≫ Thinkpad T450s Version-
   Lenovo ≫ Thinkpad T460 Version-
   Lenovo ≫ Thinkpad T460p Version-
   Lenovo ≫ Thinkpad T470p Version-
   Lenovo ≫ Thinkpad X1 Extreme Version-
   Lenovo ≫ Thinkpad X260 Version-
   Lenovo ≫ Thinkpad X270 Version-
   Lenovo ≫ Thinkpad X380 Yoga Version-
   Lenovo ≫ Thinkpad Yoga 11e Version-
   Lenovo ≫ Thinkpad Yoga 11e 3rd Gen Version-
   Lenovo ≫ Thinkpad Yoga 11e 4th Gen Version-
   Lenovo ≫ Thinkpad Yoga 11e 5th Gen Version-
   Lenovo ≫ Thinkpad Yoga 14 460 S3 Version-
   Lenovo ≫ Thinkpad Yoga 370 Version-
   Lenovo ≫ V130-15igm Version-
   Lenovo ≫ V130-15ikb Version-
   Lenovo ≫ V310-15igm Version-
   Lenovo ≫ V330-15igm Version-
   Lenovo ≫ Yoga 14 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.108
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-428 Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.