CVE:CVE-2020-8332
CNNVD:CNNVD-202010-572
IBM System x servers是美国国际商业机器公司（IBM）的一款服务器。
IBM System x服务器存在安全漏洞，该漏洞源于在旧的BIOS模式USB驱动程序中使用的SMI回调函数的一个潜在漏洞可能允许任意代码执行。在UEFI模式下操作的服务器不受影响。
solution:Upgrade lenovo bladecenter_hs23_firmware to a higher version than tke170b,and avoid the version (,tke170b); Upgrade lenovo bladecenter_hs23e_firmware to a higher version than ahe172b,and avoid the version (,ahe172b); Upgrade lenovo compute_node-x440_firmware to a higher version than cge128a,and avoid the version (,cge128a); Upgrade lenovo flex_system_x220_firmware to a higher version than kse170b,and avoid the version (,kse170b); Upgrade lenovo flex_system_x240_firmware to a higher version than b2e172b,and avoid the version (,b2e172b); Upgrade lenovo flex_system_x440_firmware to a higher version than cne172b,and avoid the version (,cne172b); Upgrade lenovo nextscale_nx360_m4_firmware to a higher version than fhe132b,and avoid the version (,fhe132b); Upgrade lenovo system_x3300_m4_firmware to a higher version than yae166b,and avoid the version (,yae166b); Upgrade lenovo system_x3500_m4_firmware to a higher version than y5e170b,and avoid the version (,y5e170b); Upgrade lenovo system_x3530_m4_firmware to a higher version than bee174b,and avoid the version (,bee174b); Upgrade lenovo system_x3550_m4_firmware to a higher version than d7e174b,and avoid the version (,d7e174b); Upgrade lenovo system_x3630_m4_firmware to a higher version than bee174b,and avoid the version (,bee174b); Upgrade lenovo system_x3650_m4_firmware to a higher version than vve172b,and avoid the version (,vve172b); Upgrade lenovo system_x3650_m4_bd_firmware to a higher version than vve172b,and avoid the version (,vve172b); Upgrade lenovo system_x3650_m4_hd_firmware to a higher version than vve172b,and avoid the version (,vve172b); Upgrade lenovo system_x3750_m4_firmware to a higher version than a5e130a,koe170b,and avoid the version (,a5e130a),(,koe170b); Upgrade lenovo idataplex_dx360_m4_firmware to a higher version than tde168b,and avoid the version (,tde168b); Upgrade lenovo idataplex_dx360_m4_water_cooled_firmware to a higher version than tde168b,and avoid the version (,tde168b)