1. Home
  2. CVE Database
  3. CVE-2020-8337
MEDIUM · 6.7

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an adm...

Vulnerability Description

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SynapticsSmart Audio Uwp< 1.0.83.0
Lenovo5-15Ikb-
LenovoAir-14 2019-
LenovoC340-14Iwl-
LenovoFlex-14Iwl-
LenovoS540-14Iwl-
LenovoS540-14Iwl Touch-
LenovoThinkpad 11E-
LenovoThinkpad 13-
LenovoThinkpad A275-
LenovoThinkpad A285-
LenovoThinkpad A475-
LenovoThinkpad A485-
LenovoThinkpad E450-
LenovoThinkpad E450C-
LenovoThinkpad E455-
LenovoThinkpad E460-
LenovoThinkpad E465-
LenovoThinkpad E470-
LenovoThinkpad E475-

Related Weaknesses (CWE)

CWE-428

References

FAQ

What is CVE-2020-8337?

CVE-2020-8337 is a vulnerability with a CVSS score of 6.7 (MEDIUM). An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an adm...

How severe is CVE-2020-8337?

CVE-2020-8337 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8337?

Check the references section above for vendor advisories and patch information. Affected products include: Synaptics Smart Audio Uwp, Lenovo 5-15Ikb, Lenovo Air-14 2019, Lenovo C340-14Iwl, Lenovo Flex-14Iwl.