6.7

CVE-2024-4550

A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacker with elevated privileges to execute arbitrary code.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorlenovo
≫
Product thinkstation_p360_workstation_firmware
Default Statusunaffected
Version < s0ekt43a
Version 0
Status affected
Vendorlenovo
≫
Product thinksystem_st50_firmware
Default Statusunaffected
Version < ite134a
Version 0
Status affected
Vendorlenovo
≫
Product thinksystem_st50_v2_firmware
Default Statusunaffected
Version < toe112d
Version 0
Status affected
Vendorlenovo
≫
Product thinksystem_st58_v2_firmware
Default Statusunaffected
Version < toe112d
Version 0
Status affected
Vendorlenovo
≫
Product thinksystem_st58_firmware
Default Statusunaffected
Version < ite134a
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.016
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@lenovo.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).