Code injection

2020-10-1422:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.

CPENameOperatorVersion
bladecenter_hs23_firmwareeq< tke170b
bladecenter_hs23e_firmwareeq< ahe172b
compute_node-x440_firmwareeq< cge128a
flex_system_x220_firmwareeq< kse170b
flex_system_x240_firmwareeq< b2e172b
flex_system_x440_firmwareeq< cne172b
idataplex_dx360_m4_firmwareeq< tde168b
idataplex_dx360_m4_water_cooled_firmwareeq< tde168b
nextscale_nx360_m4_firmwareeq< fhe132b
system_x3300_m4_firmwareeq< yae166b

Name	Operator	Version
bladecenter_hs23_firmware	eq	< tke170b
bladecenter_hs23e_firmware	eq	< ahe172b
compute_node-x440_firmware	eq	< cge128a
flex_system_x220_firmware	eq	< kse170b
flex_system_x240_firmware	eq	< b2e172b
flex_system_x440_firmware	eq	< cne172b
idataplex_dx360_m4_firmware	eq	< tde168b
idataplex_dx360_m4_water_cooled_firmware	eq	< tde168b
nextscale_nx360_m4_firmware	eq	< fhe132b
system_x3300_m4_firmware	eq	< yae166b