CVE-2020-8318
First published: Tue Apr 14 2020(Updated: )
A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo System Interface Foundation | <2.0.0.92 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8318?
CVE-2020-8318 is a privilege escalation vulnerability in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation.
How does CVE-2020-8318 affect Lenovo System Interface Foundation?
CVE-2020-8318 allows an authenticated user to execute code with elevated privileges in Lenovo System Interface Foundation prior to version 2.0.0.92.
What is the severity of CVE-2020-8318?
CVE-2020-8318 has a severity rating of 7.8 (high).
How can I fix CVE-2020-8318?
To fix CVE-2020-8318, ensure that you have the latest version (at least 2.0.0.92) of Lenovo System Interface Foundation installed.
Where can I find more information about CVE-2020-8318?
You can find more information about CVE-2020-8318 on the Lenovo Product Security website: https://support.lenovo.com/us/en/product_security/LEN-30401
- collector/nvd-index
- vendor/lenovo
- canonical/lenovo system interface foundation