ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue.
History

Wed, 23 Jul 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 23 Jul 2025 14:45:00 +0000

Type Values Removed Values Added
References

Tue, 28 Jan 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Lenovo
Lenovo thinksystem Sr670 V2
Lenovo thinksystem Sr670 V2 Firmware
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*
Vendors & Products Lenovo
Lenovo thinksystem Sr670 V2
Lenovo thinksystem Sr670 V2 Firmware

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2024-02-16T16:17:58.614Z

Updated: 2025-07-23T14:23:24.383Z

Reserved: 2024-01-18T15:28:42.477Z

Link: CVE-2024-23591

cve-icon Vulnrichment

Updated: 2024-08-01T23:06:25.269Z

cve-icon NVD

Status : Modified

Published: 2024-02-16T17:15:08.800

Modified: 2025-07-23T15:15:30.030

Link: CVE-2024-23591

cve-icon Redhat

No data.