CVE-2024-45105

Arbitrary SMM code execution via firmware callout

Published Sep 13, 2024 · Updated Sep 16, 2024

UEFI SMM callout flaws in affected Lenovo server firmware allow local users with elevated privileges to execute arbitrary code. The vulnerable SMM code calls outside protected memory and dereferences memory not controlled by SMM, allowing privileged host software to influence firmware execution. Successful exploitation requires elevated local access and yields code execution in System Management Mode, beyond ordinary operating-system controls.

CVSS severity6.7
Medium
EPSS probability0.17%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

UEFI SMM callout flaws in affected Lenovo server firmware allow local users with elevated privileges to execute arbitrary code. The vulnerable SMM code calls outside protected memory and dereferences memory not controlled by SMM, allowing privileged host software to influence firmware execution. Successful exploitation requires elevated local access and yields code execution in System Management Mode, beyond ordinary operating-system controls.

The record

CVE
CVE-2024-45105
Published
Sep 13, 2024
Updated
Sep 16, 2024
Vendor
Lenovo
Product
Lenovo ThinkAgile HX5530 Appliance BIOS
Classifications
CWE-825, T1068
Attack vector
local
Privileges
admin

Timeline

How it unfolded

  1. Sep 13, 2024CVE publishedPublication date reported by the CVE source.
  2. Sep 16, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=0 <AFE130C

What conditions does exploitation require?

Attack vectorlocal
Required privilegesadmin

What is affected?

Lenovo · Lenovo ThinkAgile HX5530 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR635 V3 BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem ST250 V3 BIOSversion=0 <CTE110I
Lenovo · Lenovo ThinkSystem SR850 V3 Firmwareversion=0 <rse110h
Lenovo · Lenovo ThinkSystem SR250 V3 BIOSversion=0 <CTE110I
Lenovo · Lenovo ThinkAgile MX3531-H Hybrid Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SN550 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkSystem SR665 BIOSversion=0 <D8E138D
Lenovo · Lenovo ThinkAgile HX5530 Firmwareversion=0 <afe130c
Lenovo · Lenovo ThinkAgile VX650 V3 SAP HANA Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile HX1331 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX635 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem ST658 V3 BIOSversion=0 <USE130G
Lenovo · Lenovo ThinkSystem SR850 V3 BIOSversion=0 <RSE110H
Lenovo · Lenovo ThinkAgile VX650 V3 DPU Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile HX665 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile HX645 V3 Integrated System Firmwareversion=0 <kae120j
Lenovo · Lenovo ThinkAgile VX650 V3 DPU SAP HANA Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile VX650 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SR258 V2 BIOSversion=0 <TQE116C
Lenovo · Lenovo ThinkSystem ST258 V3 BIOSversion=0 <CTE110I
Lenovo · Lenovo ThinkEdge SE350 V2 BIOSversion=0 <IYE110F
Lenovo · Lenovo ThinkAgile HX645 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile VX3530-G Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkEdge SE350 V2 Firmwareversion=0 <iye110f
Lenovo · Lenovo ThinkSystem SD665 V3 Firmwareversion=0 <qge124h
Lenovo · Lenovo ThinkAgile HX650 V3 Firmwareversion=0 <ese126h
Lenovo · Lenovo ThinkSystem SR950 V3 Firmwareversion=0 <ebe108h
Lenovo · Lenovo ThinkSystem SD650 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkAgile VX7531 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile MX3331-H Hybrid Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX635 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile HX3375 Appliance BIOSversion=0 <D8E138D
Lenovo · Lenovo ThinkAgile HX630 V3 Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SR645 BIOSversion=0 <D8E138D
Lenovo · Lenovo ThinkAgile HX3330 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkEdge SE455 V3 BIOSversion=0 <MBE110H
Lenovo · Lenovo ThinkAgile VX3330 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkEdge SE450 BIOSversion=0 <CME116D
Lenovo · Lenovo ThinkSystem SD530 V3 BIOSversion=0 <FNE118D
Lenovo · Lenovo ThinkAgile MX650 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SD530 V3 Firmwareversion=0 <fne118d
Lenovo · Lenovo ThinkSystem SR630 V2 BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX665 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkEdge SE450 Firmwareversion=0 <cme116d
Lenovo · Lenovo ThinkAgile VX655 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile HX650 V3 Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile MX3530-F All-Flash Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR950 V3 BIOSversion=0 <EBE108H
Lenovo · Lenovo ThinkAgile MX3330-F All-Flash Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX7330 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile HX2331 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem ST650 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkEdge SE455 V3 Firmwareversion=0 <mbe110h
Lenovo · Lenovo ThinkSystem SR650 V3 BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SD630 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkAgile VX655 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile MX650 V3 Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SD630 V2 Firmwareversion=0 <u8e128l
Lenovo · Lenovo ThinkAgile MX3531-F All-Flash Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX665 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem SR850 V2 BIOSversion=0 <M5E128I
Lenovo · Lenovo ThinkAgile MX3331-F All-Flash Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR850 V2 Firmwareversion=0 <m5e128i
Lenovo · Lenovo ThinkAgile HX665 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile MX3530-H Hybrid Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR250 V2 BIOSversion=0 <TQE116C
Lenovo · Lenovo ThinkSystem SR645 V3 BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem SD550 V3 BIOSversion=0 <FNE118D
Lenovo · Lenovo ThinkAgile MX3330-H Hybrid Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX5530 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile HX3331 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem ST250 V2 BIOSversion=0 <TQE116C
Lenovo · Lenovo ThinkAgile HX3376 Certified Node BIOSversion=0 <D8E138D
Lenovo · Lenovo ThinkAgile HX645 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile VX2330 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile MX630 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile MX630 V3 Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SD650-N V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkAgile VX630 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkEdge SE360 V2 BIOSversion=0 <IYE110F
Lenovo · Lenovo ThinkAgile VX3331 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile HX665 V3 Storage Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile VX645 V3 Certified Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem SR655 V3 BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem SD665 V3 BIOSversion=0 <QGE124H
Lenovo · Lenovo ThinkAgile HX5531 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile VX650 V3 Integrated System BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SR258 V3 BIOSversion=0 <CTE110I
Lenovo · Lenovo ThinkSystem ST650 V3 BIOSversion=0 <USE130G
Lenovo · Lenovo ThinkAgile HX7531 Node for SAP HANA BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile HX7531 Certified Node BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkAgile HX665 V3 Storage Integrated Node BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkSystem ST250 V3 Firmwareversion=0 <cte110i
Lenovo · Lenovo ThinkAgile VX650 V3 DPU Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile VX7530 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR250 V2 Firmwareversion=0 <tqe116c
Lenovo · Lenovo ThinkAgile HX650 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SD650 V3 BIOSversion=0 <USE130G
Lenovo · Lenovo ThinkSystem SR630 V3 BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkSystem SR860 V3 BIOSversion=0 <RSE110H
Lenovo · Lenovo ThinkSystem SD650 V3 Firmwareversion=0 <use130g
Lenovo · Lenovo ThinkAgile HX3331 Node SAP HANA BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem ST658 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkAgile HX3375 Firmwareversion=0 <d8e138d
Lenovo · Lenovo ThinkSystem SR665 V3 BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile HX630 V3 Certified Node BIOSversion=0 <ESE126H
Lenovo · Lenovo ThinkAgile HX2330 Appliance BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem SR650 V2 BIOSversion=0 <AFE130C
Lenovo · Lenovo ThinkSystem ST258 V2 BIOSversion=0 <TQE116C
Lenovo · Lenovo ThinkSystem SR860 V2 BIOSversion=0 <M5E128I
Lenovo · Lenovo ThinkSystem SR670 V2 BIOSversion=0 <U8E128L
Lenovo · Lenovo ThinkSystem SR675 V3 BIOSversion=0 <QGE124H
Lenovo · Lenovo ThinkAgile VX645 V3 Integrated System BIOSversion=0 <KAE120J
Lenovo · Lenovo ThinkAgile HX7530 Appliance for SAP HANA BIOSversion=0 <AFE130C

Published CVSS scores

6.7Lenovo Group Ltd.CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesadmin
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-825Expired Pointer Dereference
T1068Exploitation for Privilege Escalation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo