CVE & CISA-KEV Catalog

CVE-2024-2659

HIGH

7.2

CVSS v3

Description

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

CWE-78OS Command Injection

How to fix

Remediation Available

nextscale n1200 enclosure firmwareNVD

Affected:< FHET62A-3.50Fixed in:FHET62A-3.50CVE-2024-2659derived from NVD

thinkagile 2u4n firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile cp-cb-10 firmwareNVD

Affected:< TESM40B-1.27Fixed in:TESM40B-1.27CVE-2024-2659derived from NVD

thinkagile cp-cb-10e firmwareNVD

Affected:< TESM40B-1.27Fixed in:TESM40B-1.27CVE-2024-2659derived from NVD

thinkagile hx1021 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx1321 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx1331 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx1521-r firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx2321 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx2331 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx3321 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx3331 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx3376 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx3521-g firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx3721 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx5521-c firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx5521 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx5531 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx630 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx645 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx650 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx665 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx7521 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx7531 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx7821 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx e1 enclosure firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx e2 enclosure firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile hx enclosure firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx1320 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx2320 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx2330 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx2375 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3320 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3330 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3331 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3375 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3376 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3520-g firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3530-g firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3575-g firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx3720 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx5520 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx5530 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx5575 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx630 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx630 v4 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx635 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx645 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx650 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx650 v4 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx655 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx665 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7320-n firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7330-n firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7375-n firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7520 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7530 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7531 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7575 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx7820 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx850 v3 firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx 1se firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx 1u firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx 2u firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinkagile vx 4u firmwareNVD

Affected:< tesm40b-1.27Fixed in:tesm40b-1.27CVE-2024-2659derived from NVD

thinksystem d2 enclosure firmwareNVD

Affected:< TESM40B-1.27Fixed in:TESM40B-1.27CVE-2024-2659derived from NVD

thinksystem da240 firmwareNVD

Affected:< UMSM12I-1.1.3Fixed in:UMSM12I-1.1.3CVE-2024-2659derived from NVD

thinksystem dw612 firmwareNVD

Affected:< UMSM12I-1.1.3Fixed in:UMSM12I-1.1.3CVE-2024-2659derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredHigh

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

1.13%probability of exploitation in 30 days

63rdpercentile

Moderate risk: more likely to be exploited than 63% of all known CVEs.

References

Vendor Advisory1

support.lenovo.com

Related Vulnerabilities

Other CWE-78 (OS Command Injection) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2021-1498	Critical	9.8	100%	KEV	Fix
CVE-2014-6271	Critical	9.8	100%	KEV	Fix
CVE-2019-16920	Critical	9.8	100%	KEV	-
CVE-2022-44877	Critical	9.8	100%	KEV	Fix
CVE-2020-8515	Critical	9.8	100%	KEV	-
CVE-2020-9054	Critical	9.8	100%	KEV	Fix

Embed a live status badge for CVE-2024-2659

Markdown

[![CVE-2024-2659](https://tridentstack.com/cve/badge/CVE-2024-2659.svg)](https://tridentstack.com/cve/CVE-2024-2659)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-2659"><img src="https://tridentstack.com/cve/badge/CVE-2024-2659.svg" alt="CVE-2024-2659"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-07-28.