Vulnerability · Published Apr 11, 2025 · Assigned by lenovo
CVE-2024-11679
Medium 4.4
In plain English
A medium-severity out-of-bounds read in System x3550 M5 from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.2%top 94.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privileges to read the contents of memory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | System x3550 M5 | 0 – before 4.40 |
| Lenovo | System x3560 M5 | 0 – before 4.20 |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N