CVE-2024-4550

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-13 · updated 2026-06-17
Weakness: CWE-121

Description

A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacker with elevated privileges to execute arbitrary code.

Affected products

Lenovo Thinkstation P360 Workstation Firmware: before s0ekt43a — fixed in s0ekt43a
Lenovo Thinksystem St50 Firmware: before ite134a — fixed in ite134a
Lenovo Thinksystem St50 V2 Firmware: before toe112d — fixed in toe112d
Lenovo Thinksystem St58 Firmware: before ite134a — fixed in ite134a
Lenovo Thinksystem St58 V2 Firmware: before toe112d — fixed in toe112d

How to fix

Upgrade to a fixed version: Lenovo Thinkstation P360 Workstation Firmware s0ekt43a; Lenovo Thinksystem St50 Firmware ite134a; Lenovo Thinksystem St50 V2 Firmware toe112d; Lenovo Thinksystem St58 Firmware ite134a; Lenovo Thinksystem St58 V2 Firmware toe112d. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-165524

Get alerted when CVE-2024-4550 or the next vulnerability affects your stack