CVE-2024-45105 
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
Problem types: cwe_id: CWE-825
description: CWE-825: Expired Pointer Dereference
Affected products: vendor: Lenovo
product: HX5530 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX645 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX665 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: ST250 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: VX3331 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX1331 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX2330 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX2331 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX3330 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX3331 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX3331 Node SAP HANA (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX3375 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX3376 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX5531 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX630 V3  Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX630 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX645 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX650 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX650 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX665 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX665 V3 Storage Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX665 V3 Storage Integrated Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX7530 Appl for SAP HANA (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX7531 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: HX7531 Node SAP HANA (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3330-F All-flash Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3330-H Hybrid Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3331-F All-flash Certified node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3331-H Hybrid Certified node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3530 F All flash Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3530-H Hybrid Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3531 H Hybrid Certified node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX3531-F All-flash Certified node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX630 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX630 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX650 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: MX650 v3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: SD530 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD550 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD630 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD650 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD650 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD650-N V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SD665 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SE350 V2 (ThinkEdge) BIOS
default_status: unaffected
vendor: Lenovo
product: SE360 V2 (ThinkEdge) BIOS
default_status: unaffected
vendor: Lenovo
product: SE450 (ThinkEdge) BIOS
default_status: unaffected
vendor: Lenovo
product: SE455 V3 (ThinkEdge) BIOS
default_status: unaffected
vendor: Lenovo
product: SN550 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR250 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR250 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR258 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR258 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR630 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR630 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR635 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR645 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR645 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR650 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR650 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR655 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR665 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR665 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR670 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR675 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR850 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR850 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR860 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR860 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: SR950 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST250 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST258 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST258 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST650 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST650 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST658 V2 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: ST658 V3 (ThinkSystem) BIOS
default_status: unaffected
vendor: Lenovo
product: VX2330 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX3330 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX3530-G Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX5530 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX630 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX635 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX635 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX645 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX645 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 DPU Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 DPU Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX655 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX655 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX665 V3 Certified Node (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX665 V3 Integrated System (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX7330 Appliance (Thinkagile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX7530 Appliance (ThinkAgile) BIOS
default_status: unaffected
vendor: Lenovo
product: VX7531 Certified Node (ThinkAgile) BIOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-13T17:29:08.267Z