CVE-2024-45105
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Lenovo | HX5530 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX645 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | HX665 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | ST250 V3 (ThinkSystem) BIOS | 0 < CTE110I | affected |
| Lenovo | VX3331 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX1331 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX2330 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX2331 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX3330 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX3331 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX3331 Node SAP HANA (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX3375 Appliance (ThinkAgile) BIOS | 0 < D8E138D | affected |
| Lenovo | HX3376 Certified Node (ThinkAgile) BIOS | 0 < D8E138D | affected |
| Lenovo | HX5531 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX630 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | HX630 V3 Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | HX645 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | HX650 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | HX650 V3 Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | HX665 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | HX665 V3 Storage Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | HX665 V3 Storage Integrated Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | HX7530 Appl for SAP HANA (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX7531 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | HX7531 Node SAP HANA (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3330-F All-flash Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3330-H Hybrid Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3331-F All-flash Certified node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3331-H Hybrid Certified node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3530 F All flash Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3530-H Hybrid Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3531 H Hybrid Certified node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX3531-F All-flash Certified node (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | MX630 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | MX630 V3 Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | MX650 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | MX650 v3 Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | SD530 V3 (ThinkSystem) BIOS | 0 < FNE118D | affected |
| Lenovo | SD550 V3 (ThinkSystem) BIOS | 0 < FNE118D | affected |
| Lenovo | SD630 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | SD650 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | SD650 V3 (ThinkSystem) BIOS | 0 < USE130G | affected |
| Lenovo | SD650-N V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | SD665 V3 (ThinkSystem) BIOS | 0 < QGE124H | affected |
| Lenovo | SE350 V2 (ThinkEdge) BIOS | 0 < IYE110F | affected |
| Lenovo | SE360 V2 (ThinkEdge) BIOS | 0 < IYE110F | affected |
| Lenovo | SE450 (ThinkEdge) BIOS | 0 < CME116D | affected |
| Lenovo | SE455 V3 (ThinkEdge) BIOS | 0 < MBE110H | affected |
| Lenovo | SN550 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | SR250 V2 (ThinkSystem) BIOS | 0 < TQE116C | affected |
| Lenovo | SR250 V3 (ThinkSystem) BIOS | 0 < CTE110I | affected |
| Lenovo | SR258 V2 (ThinkSystem) BIOS | 0 < TQE116C | affected |
| Lenovo | SR258 V3 (ThinkSystem) BIOS | 0 < CTE110I | affected |
| Lenovo | SR630 V2 (ThinkSystem) BIOS | 0 < AFE130C | affected |
| Lenovo | SR630 V3 (ThinkSystem) BIOS | 0 < ESE126H | affected |
| Lenovo | SR635 V3 (ThinkSystem) BIOS | 0 < KAE120J | affected |
| Lenovo | SR645 (ThinkSystem) BIOS | 0 < D8E138D | affected |
| Lenovo | SR645 V3 (ThinkSystem) BIOS | 0 < KAE120J | affected |
| Lenovo | SR650 V2 (ThinkSystem) BIOS | 0 < AFE130C | affected |
| Lenovo | SR650 V3 (ThinkSystem) BIOS | 0 < ESE126H | affected |
| Lenovo | SR655 V3 (ThinkSystem) BIOS | 0 < KAE120J | affected |
| Lenovo | SR665 (ThinkSystem) BIOS | 0 < D8E138D | affected |
| Lenovo | SR665 V3 (ThinkSystem) BIOS | 0 < KAE120J | affected |
| Lenovo | SR670 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | SR675 V3 (ThinkSystem) BIOS | 0 < QGE124H | affected |
| Lenovo | SR850 V2 (ThinkSystem) BIOS | 0 < M5E128I | affected |
| Lenovo | SR850 V3 (ThinkSystem) BIOS | 0 < RSE110H | affected |
| Lenovo | SR860 V2 (ThinkSystem) BIOS | 0 < M5E128I | affected |
| Lenovo | SR860 V3 (ThinkSystem) BIOS | 0 < RSE110H | affected |
| Lenovo | SR950 V3 (ThinkSystem) BIOS | 0 < EBE108H | affected |
| Lenovo | ST250 V2 (ThinkSystem) BIOS | 0 < TQE116C | affected |
| Lenovo | ST258 V2 (ThinkSystem) BIOS | 0 < TQE116C | affected |
| Lenovo | ST258 V3 (ThinkSystem) BIOS | 0 < CTE110I | affected |
| Lenovo | ST650 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | ST650 V3 (ThinkSystem) BIOS | 0 < USE130G | affected |
| Lenovo | ST658 V2 (ThinkSystem) BIOS | 0 < U8E128L | affected |
| Lenovo | ST658 V3 (ThinkSystem) BIOS | 0 < USE130G | affected |
| Lenovo | VX2330 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX3330 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX3530-G Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX5530 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX630 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX635 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX635 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX645 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX645 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX650 V3 Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX650 V3 DPU Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX650 V3 DPU Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX650 V3 Integrated System (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS | 0 < ESE126H | affected |
| Lenovo | VX655 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX655 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX665 V3 Certified Node (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX665 V3 Integrated System (ThinkAgile) BIOS | 0 < KAE120J | affected |
| Lenovo | VX7330 Appliance (Thinkagile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX7530 Appliance (ThinkAgile) BIOS | 0 < AFE130C | affected |
| Lenovo | VX7531 Certified Node (ThinkAgile) BIOS | 0 < AFE130C | affected |
Weaknesses
- CWE-825: CWE-825: Expired Pointer Dereference
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.