VULNERABILITY INTELLIGENCE
CVE-2020-8337
CVSS score6.7 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2020-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
Weakness classification
- CWE-428: Unquoted Search Path or Element
Primary references
- psirt@lenovo.com — Vendor Advisory
- psirt@lenovo.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory