CVE-2020-8337
Last modified
CVE-2020-8337 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Synaptics | Smart Audio Uwp | < 1.0.83.0 |
References
- https://support.lenovo.com/us/en/product_security/len-30707Vendor Advisory
- https://support.lenovo.com/us/en/product_security/len-30707Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-8337?
How severe is CVE-2020-8337?
How do I fix CVE-2020-8337?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-8331Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-8332A potential vulnerability in the SMI callback function used …6.4
- CVE-2020-8333A potential vulnerability in the SMI callback function used …7.8
- CVE-2020-8334The BIOS tamper detection mechanism was not triggered in Len…6.8
- CVE-2020-8335The BIOS tamper detection mechanism was not triggered in Len…6.8
- CVE-2020-8336Lenovo implemented Intel CSME Anti-rollback ARB protections …6.8
- CVE-2020-8338A DLL search path vulnerability was reported in Lenovo Diagn…7.8
- CVE-2020-8339A cross-site scripting inclusion (XSSI) vulnerability was re…6.1
- CVE-2020-8340A cross-site scripting (XSS) vulnerability was discovered in…6.1
- CVE-2020-8341In Lenovo systems, SMM BIOS Write Protection is used to prev…2.4
- CVE-2020-8342A race condition vulnerability was reported in Lenovo System…7
- CVE-2020-8343Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2020-8337?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST