CVE-2024-23591: thinksystem sr670 — Fix

Description

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue.

Is your site exposed to CVE-2024-23591?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

2.0

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness Type (CWE)

CWE-1269 CWE-1269

Affected Products

Vendor	Product	Versions
lenovo	thinksystem_sr670_v2_firmware	< u8e126i-2.20
lenovo	thinksystem_sr670_v2	All

References

Advisories & Patches

https://https://support.lenovo.com/us/en/product_security/LEN-150020

Other References

https://support.lenovo.com/us/en/product_security/LEN-150020

Frequently Asked Questions

What is CVE-2024-23591? +

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue. It has a CVSS v3.1 base score of 2.0 (LOW).

How severe is CVE-2024-23591? +

CVE-2024-23591 has a CVSS v3.1 score of 2.0 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-23591? +

CVE-2024-23591 affects products from lenovo, specifically: thinksystem_sr670_v2, thinksystem_sr670_v2_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-23591? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-5457 7.5

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to …

CVE-2023-6338 7.8

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local …

CVE-2024-4131 7.8

A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated …

CVE-2024-4132 7.8

A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with …

CVE-2024-4089 7.8

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with …

CVE-2024-9046 7.8

A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated …

CVE-2024-23591