CVE-2024-45105
- State
- Published
- Severity
- 6.7 Medium
- Published
- Sep 13, 2024
- Updated
- Sep 16, 2024
- Reserved
- Aug 21, 2024
Description
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.7 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | lenovo |
Weaknesses
- CWE-825 Expired Pointer Dereference
Affected Products
| Product | Versions |
|---|---|
HX5530 Appliance (ThinkAgile) BIOSLenovo |
|
HX645 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
HX665 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
ST250 V3 (ThinkSystem) BIOSLenovo |
|
VX3331 Certified Node (ThinkAgile) BIOSLenovo |
|
HX1331 Certified Node (ThinkAgile) BIOSLenovo |
|
HX2330 Appliance (ThinkAgile) BIOSLenovo |
|
HX2331 Certified Node (ThinkAgile) BIOSLenovo |
|
HX3330 Appliance (ThinkAgile) BIOSLenovo |
|
HX3331 Certified Node (ThinkAgile) BIOSLenovo |
|
HX3331 Node SAP HANA (ThinkAgile) BIOSLenovo |
|
HX3375 Appliance (ThinkAgile) BIOSLenovo |
|
HX3376 Certified Node (ThinkAgile) BIOSLenovo |
|
HX5531 Certified Node (ThinkAgile) BIOSLenovo |
|
HX630 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
HX630 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
HX645 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
HX650 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
HX650 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
HX665 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
HX665 V3 Storage Certified Node (ThinkAgile) BIOSLenovo |
|
HX665 V3 Storage Integrated Node (ThinkAgile) BIOSLenovo |
|
HX7530 Appl for SAP HANA (ThinkAgile) BIOSLenovo |
|
HX7531 Certified Node (ThinkAgile) BIOSLenovo |
|
HX7531 Node SAP HANA (ThinkAgile) BIOSLenovo |
|
MX3330-F All-flash Appliance (ThinkAgile) BIOSLenovo |
|
MX3330-H Hybrid Appliance (ThinkAgile) BIOSLenovo |
|
MX3331-F All-flash Certified node (ThinkAgile) BIOSLenovo |
|
MX3331-H Hybrid Certified node (ThinkAgile) BIOSLenovo |
|
MX3530 F All flash Appliance (ThinkAgile) BIOSLenovo |
|
MX3530-H Hybrid Appliance (ThinkAgile) BIOSLenovo |
|
MX3531 H Hybrid Certified node (ThinkAgile) BIOSLenovo |
|
MX3531-F All-flash Certified node (ThinkAgile) BIOSLenovo |
|
MX630 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
MX630 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
MX650 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
MX650 v3 Integrated System (ThinkAgile) BIOSLenovo |
|
SD530 V3 (ThinkSystem) BIOSLenovo |
|
SD550 V3 (ThinkSystem) BIOSLenovo |
|
SD630 V2 (ThinkSystem) BIOSLenovo |
|
SD650 V2 (ThinkSystem) BIOSLenovo |
|
SD650 V3 (ThinkSystem) BIOSLenovo |
|
SD650-N V2 (ThinkSystem) BIOSLenovo |
|
SD665 V3 (ThinkSystem) BIOSLenovo |
|
SE350 V2 (ThinkEdge) BIOSLenovo |
|
SE360 V2 (ThinkEdge) BIOSLenovo |
|
SE450 (ThinkEdge) BIOSLenovo |
|
SE455 V3 (ThinkEdge) BIOSLenovo |
|
SN550 V2 (ThinkSystem) BIOSLenovo |
|
SR250 V2 (ThinkSystem) BIOSLenovo |
|
SR250 V3 (ThinkSystem) BIOSLenovo |
|
SR258 V2 (ThinkSystem) BIOSLenovo |
|
SR258 V3 (ThinkSystem) BIOSLenovo |
|
SR630 V2 (ThinkSystem) BIOSLenovo |
|
SR630 V3 (ThinkSystem) BIOSLenovo |
|
SR635 V3 (ThinkSystem) BIOSLenovo |
|
SR645 (ThinkSystem) BIOSLenovo |
|
SR645 V3 (ThinkSystem) BIOSLenovo |
|
SR650 V2 (ThinkSystem) BIOSLenovo |
|
SR650 V3 (ThinkSystem) BIOSLenovo |
|
SR655 V3 (ThinkSystem) BIOSLenovo |
|
SR665 (ThinkSystem) BIOSLenovo |
|
SR665 V3 (ThinkSystem) BIOSLenovo |
|
SR670 V2 (ThinkSystem) BIOSLenovo |
|
SR675 V3 (ThinkSystem) BIOSLenovo |
|
SR850 V2 (ThinkSystem) BIOSLenovo |
|
SR850 V3 (ThinkSystem) BIOSLenovo |
|
SR860 V2 (ThinkSystem) BIOSLenovo |
|
SR860 V3 (ThinkSystem) BIOSLenovo |
|
SR950 V3 (ThinkSystem) BIOSLenovo |
|
ST250 V2 (ThinkSystem) BIOSLenovo |
|
ST258 V2 (ThinkSystem) BIOSLenovo |
|
ST258 V3 (ThinkSystem) BIOSLenovo |
|
ST650 V2 (ThinkSystem) BIOSLenovo |
|
ST650 V3 (ThinkSystem) BIOSLenovo |
|
ST658 V2 (ThinkSystem) BIOSLenovo |
|
ST658 V3 (ThinkSystem) BIOSLenovo |
|
VX2330 Appliance (ThinkAgile) BIOSLenovo |
|
VX3330 Appliance (ThinkAgile) BIOSLenovo |
|
VX3530-G Appliance (ThinkAgile) BIOSLenovo |
|
VX5530 Appliance (ThinkAgile) BIOSLenovo |
|
VX630 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX635 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX635 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
VX645 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX645 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
VX650 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX650 V3 DPU Certified Node (ThinkAgile) BIOSLenovo |
|
VX650 V3 DPU Integrated System (ThinkAgile) BIOSLenovo |
|
VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOSLenovo |
|
VX650 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOSLenovo |
|
VX655 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX655 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
VX665 V3 Certified Node (ThinkAgile) BIOSLenovo |
|
VX665 V3 Integrated System (ThinkAgile) BIOSLenovo |
|
VX7330 Appliance (Thinkagile) BIOSLenovo |
|
VX7530 Appliance (ThinkAgile) BIOSLenovo |
|
VX7531 Certified Node (ThinkAgile) BIOSLenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.