Show plain JSON{"id": "CVE-2020-8337", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2020-06-09T20:15:22.773", "references": [{"url": "https://support.lenovo.com/us/en/product_security/len-30707", "tags": ["Vendor Advisory"], "source": "psirt@lenovo.com"}, {"url": "https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf", "tags": ["Vendor Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-428"}]}, {"type": "Secondary", "source": "psirt@lenovo.com", "description": [{"lang": "en", "value": "CWE-428"}]}], "descriptions": [{"lang": "en", "value": "An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code."}, {"lang": "es", "value": "Se report\u00f3 una vulnerabilidad de ruta de b\u00fasqueda sin comillas en versiones anteriores a 1.0.83.0 de la aplicaci\u00f3n Synaptics Smart Audio UWP asociada con los controladores de audio DCHU en las plataformas de Lenovo que podr\u00edan permitir a un usuario administrativo ejecutar c\u00f3digo arbitrario"}], "lastModified": "2020-06-19T15:23:39.700", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:5-15ikb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3E8EF8E-6096-418B-BE88-6C0DE0B8DAF9"}, {"criteria": "cpe:2.3:h:lenovo:air-14_2019:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FAE2CE62-FD58-4DA5-8E36-E09DD34174A5"}, {"criteria": "cpe:2.3:h:lenovo:c340-14iwl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AA81101-6A60-4F8C-A9AE-3D4DE12E3D4D"}, {"criteria": "cpe:2.3:h:lenovo:flex-14iwl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6826664-4C5F-4BD1-80F8-BB7E41198122"}, {"criteria": "cpe:2.3:h:lenovo:s540-14iwl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64278716-BB66-437C-8829-97A05F3A636B"}, {"criteria": "cpe:2.3:h:lenovo:s540-14iwl_touch:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BFDFF08B-3CEA-4DB6-8B45-81113230FC40"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_13:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AAD24C2-BA08-4827-A19A-33C4D71C573F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "577AACCC-001A-4C73-B036-CA942080304F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "259D895B-9968-41CF-8DB4-FAAB5A4C04AF"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE1D9347-9561-45A3-A434-3A0802BC8953"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AA339604-9751-43FA-B76F-7F2171615EC8"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e450c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1ACFA23-CA56-4350-971D-DEF9B1EB2ADB"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e455:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9CE114D6-94A7-49E3-B59F-A15F5C0CA091"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e460:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57A9D0E7-6995-4485-948D-1C6AE3DA0852"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e465:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E37D1D5-96FF-43AD-963C-89263E578EAF"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0F18F059-A701-41EE-B711-46DC7B5A1389"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e485:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "342DF899-78B0-4573-B631-8E607AB569C7"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3647F05A-FE86-494A-BA16-0009C7ACB799"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e490s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "50B892C3-C61F-452C-9A84-7824F4184F04"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DF19B858-DE7F-4A32-ACC3-ECEF1247FF45"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e545:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F4E6DD33-F8B0-4B7F-A777-4CDC8CDB5D5E"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "516C4759-773C-4975-AEF5-9976E0DFD36E"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e550c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33A5B02A-5CAF-4313-BF39-56501EC5638E"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e555:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5262D8E3-E4AB-433D-8752-043A12129A88"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C1503BA-645A-4051-8DE7-1DCCACC5D25A"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e565:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E98974C2-F0F8-4BB1-8AB6-10E71B3C614F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE35D0C7-721B-4AD7-A483-E1671C00C227"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6E574BA8-65D9-4836-B448-254D613DA86E"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e585:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CA3E9204-096A-43CF-BF1A-808691A2975B"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D03AC004-4251-47AB-AE46-2BDD93F884D9"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_edge_e440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "594AB083-54EA-4BE3-9978-644E85CEA340"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_edge_e445:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "272C1500-E07F-4340-9207-F778C6AEB3CA"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2187E37E-E3D6-467A-934C-D5613FBF8641"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "17DD928B-F0BF-44F1-9EA4-DC82233A2E69"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8D9E5785-3AC4-4BAF-BFA8-86C327C9183F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A581500-3F97-4B68-92F9-0EE9182603CE"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l460:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25DE4E9C-5296-4FB5-A2FD-363D4682E6D6"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0930094D-D5E5-4941-8C0C-1C8208310D68"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "146462F0-69DA-4583-84C5-E1F2CE27E274"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FA3F27E4-1508-444A-ADC5-694B67383F56"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E3245C2B-CED0-442E-ADE4-240F77D8AEC2"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF379C36-AD7A-4C89-9636-2EC418D34D59"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "164E0FD3-1B46-4D18-B640-B350CA464961"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D79A7D7F-7F46-4AD8-B90F-79E43B410E75"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5456AA95-094C-461C-85D4-22BDD23DF826"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_r490:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F639EA7-4C2E-4766-94E3-8ED531026119"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_r590:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "87E9F1A6-F657-455D-979E-15493E698542"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s1_3rd:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4BB8219F-2EF5-4882-B007-86F9AE2ECEEF"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52944176-C48C-4439-B0F5-9584491867CA"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_3rd_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D41F220A-8F71-49A7-BE07-D0B885C6CEB8"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_4th_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "71D21EBE-E2DE-4FB3-93ED-0DD0B33C829B"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4B96D333-5403-49F1-8B53-1BD61BD8E0AA"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s3-s440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BDA02160-1D81-44CE-8B2E-594784303464"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s3_3rd_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1C9FC9E-5E61-4890-A102-91B3461516F3"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s3_yoga_14:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B32CEBA9-DE1B-415F-9F7A-4D790E46AA4D"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s5:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AF7D68C-E60D-4181-9CD9-70111252B8D6"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D943E973-EEAF-48E6-BD8A-05C61EA4FD0D"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t450s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BDB7FFCD-F586-4846-9053-B56EA599D4EE"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t460:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D86FD3AD-D731-4C30-8A72-EC1A45B203F0"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t460p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1E6AE13-913E-4FD7-A0DC-F554605F81B6"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F5B89E5E-808D-4500-A33D-3B86E8CB28D4"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08393A13-D68E-4042-B223-EF80E581EEBC"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "94532BBF-D9CF-4164-BACA-AFEA8C35806C"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F6C2E66F-B45C-4850-8C19-2AD84939173C"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e_3rd_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA8D4BE6-6E87-4892-9E16-2799D0E0CA21"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e_4th_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "24977327-E104-4F51-8CF1-6EF1FEAED9F8"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e_5th_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "75F5B67B-0DFE-4FE3-B362-641DBE29A6C9"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_14_460_s3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A5F100E9-0BB9-4503-9B0D-20ECE5702568"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30B0E5C1-5A7B-4310-A4D3-A12E1F059568"}, {"criteria": "cpe:2.3:h:lenovo:v130-15igm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5053055-975C-4074-A9BA-BEB2E055DDEE"}, {"criteria": "cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E32DEE9B-A1C0-4679-BDE3-21E57977443F"}, {"criteria": "cpe:2.3:h:lenovo:v310-15igm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6636D55-E926-470B-A0A0-3E8EFD0ABCED"}, {"criteria": "cpe:2.3:h:lenovo:v330-15igm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "018037E5-FBB5-4B50-AC0C-CE99EAE992DF"}, {"criteria": "cpe:2.3:h:lenovo:yoga_14:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "593CFCC6-4960-45EB-92C2-C8CA8757C103"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:synaptics:smart_audio_uwp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60911CE4-DC1E-420B-BAAF-A881C026CB35", "versionEndExcluding": "1.0.83.0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}