Login Request a demo
Medium severity · published Jun 9, 2020
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms…
6.7
CVSS
0.4%
EPSS
No
On KEV
Description
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Smart Audio Uwp · Synaptics
before 1.0.83.0 · source: NVD
Affected product
SA
Smart Audio Uwp
Synaptics
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8337
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8337
Vendor Advisory
https://support.lenovo.com/us/en/product_security/len-30707
Vendor Advisory
https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf