An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that cou
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in AFE130C, KAE120J, CTE110I, D8E138D, ESE126H, and 11 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Lenovo HX5530 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo ST250 V3 (ThinkSystem) BIOS
fixed in CTE110I
- Lenovo VX3331 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX1331 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX2330 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX2331 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX3330 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX3331 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX3375 Appliance (ThinkAgile) BIOS
fixed in D8E138D
- Lenovo HX3376 Certified Node (ThinkAgile) BIOS
fixed in D8E138D
- Lenovo HX5531 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX630 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo HX630 V3 Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo HX645 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo HX650 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo HX650 V3 Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo HX665 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo HX665 V3 Storage Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo HX665 V3 Storage Integrated Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo HX7530 Appl for SAP HANA (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX7531 Certified Node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo HX7531 Node SAP HANA (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3330-F All-flash Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3330-H Hybrid Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3331-F All-flash Certified node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3331-H Hybrid Certified node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3530 F All flash Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3530-H Hybrid Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3531 H Hybrid Certified node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX3531-F All-flash Certified node (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo MX630 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo MX630 V3 Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo MX650 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo MX650 v3 Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo SD530 V3 (ThinkSystem) BIOS
fixed in FNE118D
- Lenovo SD550 V3 (ThinkSystem) BIOS
fixed in FNE118D
- Lenovo SD630 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo SD650 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo SD650 V3 (ThinkSystem) BIOS
fixed in USE130G
- Lenovo SD650-N V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo SD665 V3 (ThinkSystem) BIOS
fixed in QGE124H
- Lenovo SE350 V2 (ThinkEdge) BIOS
fixed in IYE110F
- Lenovo SE360 V2 (ThinkEdge) BIOS
fixed in IYE110F
- Lenovo SE450 (ThinkEdge) BIOS
fixed in CME116D
- Lenovo SE455 V3 (ThinkEdge) BIOS
fixed in MBE110H
- Lenovo SN550 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo SR250 V2 (ThinkSystem) BIOS
fixed in TQE116C
- Lenovo SR250 V3 (ThinkSystem) BIOS
fixed in CTE110I
- Lenovo SR258 V2 (ThinkSystem) BIOS
fixed in TQE116C
- Lenovo SR258 V3 (ThinkSystem) BIOS
fixed in CTE110I
- Lenovo SR630 V2 (ThinkSystem) BIOS
fixed in AFE130C
- Lenovo SR630 V3 (ThinkSystem) BIOS
fixed in ESE126H
- Lenovo SR635 V3 (ThinkSystem) BIOS
fixed in KAE120J
- Lenovo SR645 (ThinkSystem) BIOS
fixed in D8E138D
- Lenovo SR645 V3 (ThinkSystem) BIOS
fixed in KAE120J
- Lenovo SR650 V2 (ThinkSystem) BIOS
fixed in AFE130C
- Lenovo SR650 V3 (ThinkSystem) BIOS
fixed in ESE126H
- Lenovo SR655 V3 (ThinkSystem) BIOS
fixed in KAE120J
- Lenovo SR665 (ThinkSystem) BIOS
fixed in D8E138D
- Lenovo SR665 V3 (ThinkSystem) BIOS
fixed in KAE120J
- Lenovo SR670 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo SR675 V3 (ThinkSystem) BIOS
fixed in QGE124H
- Lenovo SR850 V2 (ThinkSystem) BIOS
fixed in M5E128I
- Lenovo SR850 V3 (ThinkSystem) BIOS
fixed in RSE110H
- Lenovo SR860 V2 (ThinkSystem) BIOS
fixed in M5E128I
- Lenovo SR860 V3 (ThinkSystem) BIOS
fixed in RSE110H
- Lenovo SR950 V3 (ThinkSystem) BIOS
fixed in EBE108H
- Lenovo ST250 V2 (ThinkSystem) BIOS
fixed in TQE116C
- Lenovo ST258 V2 (ThinkSystem) BIOS
fixed in TQE116C
- Lenovo ST258 V3 (ThinkSystem) BIOS
fixed in CTE110I
- Lenovo ST650 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo ST650 V3 (ThinkSystem) BIOS
fixed in USE130G
- Lenovo ST658 V2 (ThinkSystem) BIOS
fixed in U8E128L
- Lenovo ST658 V3 (ThinkSystem) BIOS
fixed in USE130G
- Lenovo VX2330 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo VX3330 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo VX3530-G Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo VX5530 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo VX630 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX635 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX635 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX645 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX645 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX650 V3 Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX650 V3 DPU Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX650 V3 DPU Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX650 V3 Integrated System (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS
fixed in ESE126H
- Lenovo VX655 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX655 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX665 V3 Certified Node (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX665 V3 Integrated System (ThinkAgile) BIOS
fixed in KAE120J
- Lenovo VX7330 Appliance (Thinkagile) BIOS
fixed in AFE130C
- Lenovo VX7530 Appliance (ThinkAgile) BIOS
fixed in AFE130C
- Lenovo VX7531 Certified Node (ThinkAgile) BIOS
fixed in AFE130C