CVE-2024-45105
Medium
Description
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductHX5530 Appliance (ThinkAgile) BIOS
PublishedSep 13, 2024
First seenSep 13, 2024
Weakness typeCWE-825CWE-825
How to fix
Update
- Lenovo HX5530 Appliance (ThinkAgile) BIOSAFE130C or later
- Lenovo HX645 V3 Integrated System (ThinkAgile) BIOSKAE120J or later
- Lenovo HX665 V3 Certified Node (ThinkAgile) BIOSKAE120J or later
- Lenovo ST250 V3 (ThinkSystem) BIOSCTE110I or later
- Lenovo VX3331 Certified Node (ThinkAgile) BIOSAFE130C or later
- Lenovo HX1331 Certified Node (ThinkAgile) BIOSAFE130C or later
- Lenovo HX2330 Appliance (ThinkAgile) BIOSAFE130C or later
- Lenovo HX2331 Certified Node (ThinkAgile) BIOSAFE130C or later
- Lenovo HX3330 Appliance (ThinkAgile) BIOSAFE130C or later
- Lenovo HX3331 Certified Node (ThinkAgile) BIOSAFE130C or later
- Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOSAFE130C or later
- Lenovo HX3375 Appliance (ThinkAgile) BIOSD8E138D or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo HX5530 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo ST250 V3 (ThinkSystem) BIOS | v < CTE110I | CTE110I |
| Lenovo VX3331 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX1331 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX2330 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX2331 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX3330 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX3331 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX3375 Appliance (ThinkAgile) BIOS | v < D8E138D | D8E138D |
| Lenovo HX3376 Certified Node (ThinkAgile) BIOS | v < D8E138D | D8E138D |
| Lenovo HX5531 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX630 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo HX630 V3 Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo HX645 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo HX650 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo HX650 V3 Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo HX665 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo HX665 V3 Storage Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo HX665 V3 Storage Integrated Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo HX7530 Appl for SAP HANA (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX7531 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo HX7531 Node SAP HANA (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3330-F All-flash Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3330-H Hybrid Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3331-F All-flash Certified node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3331-H Hybrid Certified node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3530 F All flash Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3530-H Hybrid Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3531 H Hybrid Certified node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX3531-F All-flash Certified node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo MX630 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo MX630 V3 Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo MX650 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo MX650 v3 Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo SD530 V3 (ThinkSystem) BIOS | v < FNE118D | FNE118D |
| Lenovo SD550 V3 (ThinkSystem) BIOS | v < FNE118D | FNE118D |
| Lenovo SD630 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo SD650 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo SD650 V3 (ThinkSystem) BIOS | v < USE130G | USE130G |
| Lenovo SD650-N V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo SD665 V3 (ThinkSystem) BIOS | v < QGE124H | QGE124H |
| Lenovo SE350 V2 (ThinkEdge) BIOS | v < IYE110F | IYE110F |
| Lenovo SE360 V2 (ThinkEdge) BIOS | v < IYE110F | IYE110F |
| Lenovo SE450 (ThinkEdge) BIOS | v < CME116D | CME116D |
| Lenovo SE455 V3 (ThinkEdge) BIOS | v < MBE110H | MBE110H |
| Lenovo SN550 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo SR250 V2 (ThinkSystem) BIOS | v < TQE116C | TQE116C |
| Lenovo SR250 V3 (ThinkSystem) BIOS | v < CTE110I | CTE110I |
| Lenovo SR258 V2 (ThinkSystem) BIOS | v < TQE116C | TQE116C |
| Lenovo SR258 V3 (ThinkSystem) BIOS | v < CTE110I | CTE110I |
| Lenovo SR630 V2 (ThinkSystem) BIOS | v < AFE130C | AFE130C |
| Lenovo SR630 V3 (ThinkSystem) BIOS | v < ESE126H | ESE126H |
| Lenovo SR635 V3 (ThinkSystem) BIOS | v < KAE120J | KAE120J |
| Lenovo SR645 (ThinkSystem) BIOS | v < D8E138D | D8E138D |
| Lenovo SR645 V3 (ThinkSystem) BIOS | v < KAE120J | KAE120J |
| Lenovo SR650 V2 (ThinkSystem) BIOS | v < AFE130C | AFE130C |
| Lenovo SR650 V3 (ThinkSystem) BIOS | v < ESE126H | ESE126H |
| Lenovo SR655 V3 (ThinkSystem) BIOS | v < KAE120J | KAE120J |
| Lenovo SR665 (ThinkSystem) BIOS | v < D8E138D | D8E138D |
| Lenovo SR665 V3 (ThinkSystem) BIOS | v < KAE120J | KAE120J |
| Lenovo SR670 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo SR675 V3 (ThinkSystem) BIOS | v < QGE124H | QGE124H |
| Lenovo SR850 V2 (ThinkSystem) BIOS | v < M5E128I | M5E128I |
| Lenovo SR850 V3 (ThinkSystem) BIOS | v < RSE110H | RSE110H |
| Lenovo SR860 V2 (ThinkSystem) BIOS | v < M5E128I | M5E128I |
| Lenovo SR860 V3 (ThinkSystem) BIOS | v < RSE110H | RSE110H |
| Lenovo SR950 V3 (ThinkSystem) BIOS | v < EBE108H | EBE108H |
| Lenovo ST250 V2 (ThinkSystem) BIOS | v < TQE116C | TQE116C |
| Lenovo ST258 V2 (ThinkSystem) BIOS | v < TQE116C | TQE116C |
| Lenovo ST258 V3 (ThinkSystem) BIOS | v < CTE110I | CTE110I |
| Lenovo ST650 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo ST650 V3 (ThinkSystem) BIOS | v < USE130G | USE130G |
| Lenovo ST658 V2 (ThinkSystem) BIOS | v < U8E128L | U8E128L |
| Lenovo ST658 V3 (ThinkSystem) BIOS | v < USE130G | USE130G |
| Lenovo VX2330 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX3330 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX3530-G Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX5530 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX630 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX635 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX635 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX645 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX645 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX650 V3 Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX650 V3 DPU Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX650 V3 DPU Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX650 V3 Integrated System (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS | v < ESE126H | ESE126H |
| Lenovo VX655 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX655 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX665 V3 Certified Node (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX665 V3 Integrated System (ThinkAgile) BIOS | v < KAE120J | KAE120J |
| Lenovo VX7330 Appliance (Thinkagile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX7530 Appliance (ThinkAgile) BIOS | v < AFE130C | AFE130C |
| Lenovo VX7531 Certified Node (ThinkAgile) BIOS | v < AFE130C | AFE130C |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.