CVE-2024-4550
Medium
Description
A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacker with elevated privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductP360 Workstation (ThinkStation) BIOS
PublishedSep 13, 2024
First seenSep 13, 2024
Weakness typeCWE-121CWE-121
How to fix
Update
- Lenovo ST50 (ThinkSystem) BIOSITE134A or later
- Lenovo ST50 V2 (ThinkSystem) BIOSTOE112D or later
- Lenovo ST58 (ThinkSystem) BIOSITE134A or later
- Lenovo ST58 V2 (ThinkSystem) BIOSTOE112D or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo P360 Workstation (ThinkStation) BIOS | v ≤ S0EKT43A | — |
| Lenovo ST50 (ThinkSystem) BIOS | v < ITE134A | ITE134A |
| Lenovo ST50 V2 (ThinkSystem) BIOS | v < TOE112D | TOE112D |
| Lenovo ST58 (ThinkSystem) BIOS | v < ITE134A | ITE134A |
| Lenovo ST58 V2 (ThinkSystem) BIOS | v < TOE112D | TOE112D |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.