CVE-2024-23591

Katalog CVE

CVSS 2.3 · Low EPSS 0,16%

Kerentanan Product Released in Non-Release Configuration pada lenovo thinksystem sr670 v2 firmware. Skor CVSS 3.1 2.3 (Low) menurut NVD.

Deskripsi (NVD)

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue.

Rincian

Terbit di NVD

16 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1269: Product Released in Non-Release Configuration

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://https://support.lenovo.com/us/en/product_security/LEN-150020 broken link · advisory vendor
• https://support.lenovo.com/us/en/product_security/LEN-150020