CVE-2024-2659: Lenovo Nextscale n1200 Enclosure Firmware

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

Affected products

• Lenovo Nextscale n1200 Enclosure Firmware: before FHET62A-3.50 (fixed in FHET62A-3.50)
• Lenovo Thinkagile 2u4n Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile CP-Cb-10 Firmware: before TESM40B-1.27 (fixed in TESM40B-1.27)
• Lenovo Thinkagile CP-Cb-10e Firmware: before TESM40B-1.27 (fixed in TESM40B-1.27)
• Lenovo Thinkagile HX1021 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX1321 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX1331 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX1521-R Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX2321 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX2331 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX3321 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX3331 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX3376 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX3521-G Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX3721 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX5521-C Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX5521 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX5531 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX630 v3 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX645 v3 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX650 v3 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX665 v3 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX7521 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX7531 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• Lenovo Thinkagile HX7821 Firmware: before tesm40b-1.27 (fixed in tesm40b-1.27)
• and 43 more

Published 2024-04-15. Last modified 2026-06-17.