Read the docs
TI-2020-06727 Aliases CVE-2020-8324GHSA-jr27-w24g-5rq6

Improper signature verification in LenovoAppScenarioPluginSystem for Lenovo System…

Priority LOW 25CWE-347Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-347.

Summary

A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed.

Why it matters now

EPSS 0.00351 28th percentileScored 2026-11-07
Fix Fixed LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation (Lenovo): 1.2.184.31

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoLenovoAppScenarioPluginSystem for Lenovo System Interface Foundationbefore 1.2.184.311.2.184.31Patch availableCNA
  • LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation VendorLenovo Affected before 1.2.184.31 Fixed in 1.2.184.31 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lenovo:system_interface_foundation:*:*:*:*:*:*:*:*before 1.2.184.31VulnerableLenovo
  • cpe:2.3:a:lenovo:system_interface_foundation:*:*:*:*:*:*:*:* Versions before 1.2.184.31 Vulnerable ·Lenovo

Remediation

  • Fix · CNA LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation (Lenovo) Fixed in 1.2.184.31

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-8324
  2. 2026-10-03 Alias added: GHSA-jr27-w24g-5rq6

References

Advisory 1

  • TI-2019-04385 A potential vulnerability was reported in Lenovo System Interface Foundation versions… CVSS 3.1HIGH 8.8
  • TI-2021-02866 Time-of-check time-of-use race condition in Lenovo IMController CVSS 3.1HIGH 7.8
  • TI-2021-02831 Time-of-check time-of-use race condition in Lenovo IMController CVSS 3.1HIGH 7.8
  • TI-2020-06722 A privilege escalation vulnerability was reported in Lenovo System Interface Foundation… CVSS 3.1HIGH 7.8
  • TI-2020-06721 A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for… CVSS 3.1HIGH 7.8
  • TI-2019-04388 Untrusted search path in Lenovo System Interface Foundation CVSS 3.1HIGH 7.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences