cvelist/2024/45xxx/CVE-2024-45105.json
2024-09-13 18:00:33 +00:00

1278 lines
62 KiB
JSON

{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2024-45105",
"ASSIGNER": "psirt@lenovo.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-825: Expired Pointer Dereference",
"cweId": "CWE-825"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Lenovo",
"product": {
"product_data": [
{
"product_name": "HX5530 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX645 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "HX665 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "ST250 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "CTE110I"
}
]
}
},
{
"product_name": "VX3331 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX1331 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX2330 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX2331 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX3330 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX3331 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX3331 Node SAP HANA (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX3375 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "D8E138D"
}
]
}
},
{
"product_name": "HX3376 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "D8E138D"
}
]
}
},
{
"product_name": "HX5531 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX630 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "HX630 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "HX645 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "HX650 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "HX650 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "HX665 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "HX665 V3 Storage Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "HX665 V3 Storage Integrated Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "HX7530 Appl for SAP HANA (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX7531 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "HX7531 Node SAP HANA (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3330-F All-flash Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3330-H Hybrid Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3331-F All-flash Certified node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3331-H Hybrid Certified node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3530 F All flash Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3530-H Hybrid Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3531 H Hybrid Certified node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX3531-F All-flash Certified node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "MX630 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "MX630 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "MX650 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "MX650 v3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "SD530 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "FNE118D"
}
]
}
},
{
"product_name": "SD550 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "FNE118D"
}
]
}
},
{
"product_name": "SD630 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "SD650 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "SD650 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "USE130G"
}
]
}
},
{
"product_name": "SD650-N V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "SD665 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "QGE124H"
}
]
}
},
{
"product_name": "SE350 V2 (ThinkEdge) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "IYE110F"
}
]
}
},
{
"product_name": "SE360 V2 (ThinkEdge) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "IYE110F"
}
]
}
},
{
"product_name": "SE450 (ThinkEdge) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "CME116D"
}
]
}
},
{
"product_name": "SE455 V3 (ThinkEdge) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "MBE110H"
}
]
}
},
{
"product_name": "SN550 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "SR250 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "TQE116C"
}
]
}
},
{
"product_name": "SR250 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "CTE110I"
}
]
}
},
{
"product_name": "SR258 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "TQE116C"
}
]
}
},
{
"product_name": "SR258 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "CTE110I"
}
]
}
},
{
"product_name": "SR630 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "SR630 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "SR635 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "SR645 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "D8E138D"
}
]
}
},
{
"product_name": "SR645 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "SR650 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "SR650 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "SR655 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "SR665 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "D8E138D"
}
]
}
},
{
"product_name": "SR665 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "SR670 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "SR675 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "QGE124H"
}
]
}
},
{
"product_name": "SR850 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "M5E128I"
}
]
}
},
{
"product_name": "SR850 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "RSE110H"
}
]
}
},
{
"product_name": "SR860 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "M5E128I"
}
]
}
},
{
"product_name": "SR860 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "RSE110H"
}
]
}
},
{
"product_name": "SR950 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "EBE108H"
}
]
}
},
{
"product_name": "ST250 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "TQE116C"
}
]
}
},
{
"product_name": "ST258 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "TQE116C"
}
]
}
},
{
"product_name": "ST258 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "CTE110I"
}
]
}
},
{
"product_name": "ST650 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "ST650 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "USE130G"
}
]
}
},
{
"product_name": "ST658 V2 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "U8E128L"
}
]
}
},
{
"product_name": "ST658 V3 (ThinkSystem) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "USE130G"
}
]
}
},
{
"product_name": "VX2330 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX3330 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX3530-G Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX5530 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX630 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX635 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX635 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX645 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX645 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX650 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX650 V3 DPU Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX650 V3 DPU Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX650 V3 DPU SAP HANA Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX650 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX650 V3 SAP HANA Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "ESE126H"
}
]
}
},
{
"product_name": "VX655 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX655 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX665 V3 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX665 V3 Integrated System (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "KAE120J"
}
]
}
},
{
"product_name": "VX7330 Appliance (Thinkagile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX7530 Appliance (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
},
{
"product_name": "VX7531 Certified Node (ThinkAgile) BIOS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "AFE130C"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-165524",
"refsource": "MISC",
"name": "https://support.lenovo.com/us/en/product_security/LEN-165524"
}
]
},
"generator": {
"engine": "Vulnogram 0.2.0"
},
"source": {
"discovery": "UNKNOWN"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update system firmware to the version (or newer) indicated for your model in the advisory: <a target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-165524\">https://support.lenovo.com/us/en/product_security/LEN-165524</a>\n\n<br>"
}
],
"value": "Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-165524"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
]
}
}