Database/Firmware, BMC & network fabric
Lenovo ThinkSystem / ThinkStation (firmware buffer overflow): A local attacker with elevated privileges executes
CVE-2024-4550Firmware, BMC & network fabriccurated
Impact
A local attacker with elevated privileges executes arbitrary code via a firmware buffer overflow on ThinkSystem servers.
Who can reach it
Local elevated-privilege access to the server.
What to do
Apply the Lenovo firmware update per LEN-165524. Firmware flash requiring a reboot - batch with other node firmware work.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.