CPE Details
Lenovo THINKSYSTEM SR670 V2 FIRMWARE U8E118M
u8e118m
2023-02-07
16h28 +00:00
16h28 +00:00
2023-02-14
18h55 +00:00
18h55 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:u8e118m:*:*:*:*:*:*:*
Informations
Vendor
lenovoProduct
thinksystem_sr670_v2_firmwareVersion
u8e118mRelated CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue. | 2.3 |
Low |
||
| An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. | 4.4 |
Medium |
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.