OS command injection in Lenovo SMM, SMM2, FPC
Priority LOW 36CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01131 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | SMM, SMM2, FPC | various | — | No fix listed | CNA |
- SMM, SMM2, FPC VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 136
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:nextscale_n1200_enclosure_firmware:*:*:*:*:*:*:*:* | before FHET62A-3.50 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:nextscale_n1200_enclosure:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_cp-cb-10_firmware:*:*:*:*:*:*:*:* | before TESM40B-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_cp-cb-10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_cp-cb-10e_firmware:*:*:*:*:*:*:*:* | before TESM40B-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_cp-cb-10e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:nextscale_n1200_enclosure_firmware:*:*:*:*:*:*:*:* Versions before FHET62A-3.50 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:nextscale_n1200_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_cp-cb-10_firmware:*:*:*:*:*:*:*:* Versions before TESM40B-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_cp-cb-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_cp-cb-10e_firmware:*:*:*:*:*:*:*:* Versions before TESM40B-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_cp-cb-10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 126 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx_e1_enclosure_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_e1_enclosure:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx_e2_enclosure_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_e2_enclosure:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx630_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx630_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx645_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx645_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx650_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx650_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx665_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx665_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_2u4n_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_2u4n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7320-n_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7320-n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx_1u_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_1u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7330-n_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7330-n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx630_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx630_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx630_v4_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx630_v4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx635_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx635_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx2375_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx2375:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3375_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3375:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7375-n_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7375-n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3376_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3376:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx645_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx645_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx_2u_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_2u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx650_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx650_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx650_v4_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx650_v4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx655_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx655_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx5575_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx5575:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7575_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7575:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx3575-g_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx3575-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx665_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx665_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx850_v3_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx850_v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:* | before tesm40b-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_d2_enclosure_firmware:*:*:*:*:*:*:*:* | before TESM40B-1.27 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_d2_enclosure:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_da240_firmware:*:*:*:*:*:*:*:* | before UMSM12I-1.1.3 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_da240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_dw612_firmware:*:*:*:*:*:*:*:* | before UMSM12I-1.1.3 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_dw612:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx_e1_enclosure_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_e1_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx_e2_enclosure_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_e2_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx630_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx630_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx645_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx645_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx650_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx650_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx665_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx665_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_2u4n_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_2u4n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7320-n_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7320-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx_1u_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_1u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7330-n_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7330-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx630_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx630_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx630_v4_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx630_v4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx635_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx635_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx2375_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx2375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3375_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7375-n_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7375-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3376_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3376:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx645_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx645_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx_2u_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_2u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx650_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx650_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx650_v4_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx650_v4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx655_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx655_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx5575_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx5575:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7575_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7575:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx3575-g_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx3575-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx665_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx665_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx850_v3_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx850_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:* Versions before tesm40b-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_d2_enclosure_firmware:*:*:*:*:*:*:*:* Versions before TESM40B-1.27 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_d2_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_da240_firmware:*:*:*:*:*:*:*:* Versions before UMSM12I-1.1.3 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_da240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_dw612_firmware:*:*:*:*:*:*:*:* Versions before UMSM12I-1.1.3 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_dw612:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-2659
- 2026-10-03 Alias added: GHSA-6rqw-3wpr-8qcj
References
More Lenovo Nextscale N1200 Enclosure Firmware vulnerabilities
- TI-2021-02807 Authentication bypass in Lenovo Fan Power Controller2 CVSS 3.1CRITICAL 9.8
- TI-2021-02780 Authentication bypass in Lenovo Fan Power Controller2 CVSS 3.1CRITICAL 9.8
- TI-2023-02803 An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC… CVSS 3.1HIGH 7.5
- TI-2023-02804 A valid, authenticated user with limited privileges may be able to use specifically… CVSS 3.1MEDIUM 6.3
Sources
- CVE-2024-2659 · CVE Program
- CVE-2024-2659 · NVD
- FIRST EPSS
- GHSA-6rqw-3wpr-8qcj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences