TI-2024-15617 Aliases CVE-2024-23591 GHSA-xgm2-cpgm-525v

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were…

LOW 11CWE-1269Published 2024-02-16 · Updated 2025-07-23

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00162 5th percentileScored 2026-11-07

Fix Fixed ThinkSystem SR670 V2 (Lenovo): U8E126I-2.20

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lenovo	ThinkSystem SR670 V2	before U8E126I-2.20	U8E126I-2.20	Patch available	CNA

ThinkSystem SR670 V2 VendorLenovo Affected before U8E126I-2.20 Fixed in U8E126I-2.20 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware::::::::	before u8e126i-2.20	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:::::::*	not specified by NVD	Running on	Lenovo

cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:* Versions before u8e126i-2.20 Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Remediation

Fix · CNA ThinkSystem SR670 V2 (Lenovo) Fixed in U8E126I-2.20

Timeline

2026-10-02 Threatist record created from CVE-2024-23591
2026-10-03 Alias added: GHSA-xgm2-cpgm-525v

References

Advisory 1

https://https://support.lenovo.com/us/en/product_security/LEN-150020

Other 1

https://support.lenovo.com/us/en/product_security/LEN-150020

TI-2023-13507 Incorrect default permissions in Lenovo XClarity Controller CVSS 3.1HIGH 8.8
TI-2023-04251 An authenticated XCC user can change permissions for any user through a crafted API command. CVSS 3.1HIGH 8.8
TI-2023-10802 A valid, authenticated user may be able to trigger a denial of service of the XCC web… CVSS 3.1HIGH 8.8
TI-2023-00645 Improper input validation in Lenovo XClarity Controller CVSS 3.1HIGH 8.8
TI-2023-04250 Missing authorization in Lenovo XClarity Controller CVSS 3.1HIGH 8.1
TI-2023-13506 Improper privilege management in Lenovo XClarity Controller CVSS 3.1MEDIUM 5.9

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences