An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that co…

published 2024-09-13 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-41310

cvss: 6.7; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 6%
public exploits: 0; none known

An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.

Patch / fix

fixed in 30

Lenovo HX5530 Appliance (ThinkAgile) BIOS AFE130C
Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS KAE120J
Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS KAE120J
Lenovo ST250 V3 (ThinkSystem) BIOS CTE110I
Lenovo VX3331 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX1331 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX2330 Appliance (ThinkAgile) BIOS AFE130C
Lenovo HX2331 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX3330 Appliance (ThinkAgile) BIOS AFE130C
Lenovo HX3331 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOS AFE130C
Lenovo HX3375 Appliance (ThinkAgile) BIOS D8E138D
Lenovo HX3376 Certified Node (ThinkAgile) BIOS D8E138D
Lenovo HX5531 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX630 V3 Certified Node (ThinkAgile) BIOS ESE126H
Lenovo HX630 V3 Integrated System (ThinkAgile) BIOS ESE126H
Lenovo HX645 V3 Certified Node (ThinkAgile) BIOS KAE120J
Lenovo HX650 V3 Certified Node (ThinkAgile) BIOS ESE126H
Lenovo HX650 V3 Integrated System (ThinkAgile) BIOS ESE126H
Lenovo HX665 V3 Integrated System (ThinkAgile) BIOS KAE120J
Lenovo HX665 V3 Storage Certified Node (ThinkAgile) BIOS KAE120J
Lenovo HX665 V3 Storage Integrated Node (ThinkAgile) BIOS KAE120J
Lenovo HX7530 Appl for SAP HANA (ThinkAgile) BIOS AFE130C
Lenovo HX7531 Certified Node (ThinkAgile) BIOS AFE130C
Lenovo HX7531 Node SAP HANA (ThinkAgile) BIOS AFE130C
Lenovo MX3330-F All-flash Appliance (ThinkAgile) BIOS AFE130C
Lenovo MX3330-H Hybrid Appliance (ThinkAgile) BIOS AFE130C
Lenovo MX3331-F All-flash Certified node (ThinkAgile) BIOS AFE130C
Lenovo MX3331-H Hybrid Certified node (ThinkAgile) BIOS AFE130C
Lenovo MX3530 F All flash Appliance (ThinkAgile) BIOS AFE130C

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-09-13)

Exploit prediction

0.17% chance of exploitation in the next 30 days, higher than 6% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Lenovo HX5530 Appliance (ThinkAgile) BIOS
Lenovo HX645 V3 Integrated System (ThinkAgile) BIOS
Lenovo HX665 V3 Certified Node (ThinkAgile) BIOS
Lenovo ST250 V3 (ThinkSystem) BIOS
Lenovo VX3331 Certified Node (ThinkAgile) BIOS
Lenovo HX1331 Certified Node (ThinkAgile) BIOS
Lenovo HX2330 Appliance (ThinkAgile) BIOS
Lenovo HX2331 Certified Node (ThinkAgile) BIOS
Lenovo HX3330 Appliance (ThinkAgile) BIOS
Lenovo HX3331 Certified Node (ThinkAgile) BIOS
Lenovo HX3331 Node SAP HANA (ThinkAgile) BIOS
Lenovo HX3375 Appliance (ThinkAgile) BIOS
Lenovo HX3376 Certified Node (ThinkAgile) BIOS
Lenovo HX5531 Certified Node (ThinkAgile) BIOS
Lenovo HX630 V3 Certified Node (ThinkAgile) BIOS
Lenovo HX630 V3 Integrated System (ThinkAgile) BIOS
Lenovo HX645 V3 Certified Node (ThinkAgile) BIOS
Lenovo HX650 V3 Certified Node (ThinkAgile) BIOS
Lenovo HX650 V3 Integrated System (ThinkAgile) BIOS
Lenovo HX665 V3 Integrated System (ThinkAgile) BIOS
Lenovo HX665 V3 Storage Certified Node (ThinkAgile) BIOS
Lenovo HX665 V3 Storage Integrated Node (ThinkAgile) BIOS
Lenovo HX7530 Appl for SAP HANA (ThinkAgile) BIOS
Lenovo HX7531 Certified Node (ThinkAgile) BIOS
Lenovo HX7531 Node SAP HANA (ThinkAgile) BIOS
Lenovo MX3330-F All-flash Appliance (ThinkAgile) BIOS
Lenovo MX3330-H Hybrid Appliance (ThinkAgile) BIOS
Lenovo MX3331-F All-flash Certified node (ThinkAgile) BIOS
Lenovo MX3331-H Hybrid Certified node (ThinkAgile) BIOS
Lenovo MX3530 F All flash Appliance (ThinkAgile) BIOS
Lenovo MX3530-H Hybrid Appliance (ThinkAgile) BIOS
Lenovo MX3531 H Hybrid Certified node (ThinkAgile) BIOS
Lenovo MX3531-F All-flash Certified node (ThinkAgile) BIOS
Lenovo MX630 V3 Certified Node (ThinkAgile) BIOS
Lenovo MX630 V3 Integrated System (ThinkAgile) BIOS
Lenovo MX650 V3 Certified Node (ThinkAgile) BIOS
Lenovo MX650 v3 Integrated System (ThinkAgile) BIOS
Lenovo SD530 V3 (ThinkSystem) BIOS
Lenovo SD550 V3 (ThinkSystem) BIOS
Lenovo SD630 V2 (ThinkSystem) BIOS
Lenovo SD650 V2 (ThinkSystem) BIOS
Lenovo SD650 V3 (ThinkSystem) BIOS
Lenovo SD650-N V2 (ThinkSystem) BIOS
Lenovo SD665 V3 (ThinkSystem) BIOS
Lenovo SE350 V2 (ThinkEdge) BIOS
Lenovo SE360 V2 (ThinkEdge) BIOS
Lenovo SE450 (ThinkEdge) BIOS
Lenovo SE455 V3 (ThinkEdge) BIOS
Lenovo SN550 V2 (ThinkSystem) BIOS
Lenovo SR250 V2 (ThinkSystem) BIOS

Classification

Weakness

CWE-825 Expired Pointer Dereference

References

support.lenovo.com /us/en/product_security/LEN-165524

Sources

CVE List CVE-2024-45105
NVD CVE-2024-45105

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary