Multi-Vendor BIOS Security Vulnerabilities (January 2025)

Multi-Vendor BIOS Security Vulnerabilities (January 2025)

Multi-Vendor BIOS Security Vulnerabilities (January 2025)

Lenovo Security Advisory: LEN-183647

Potential Impact: Privilege Escalation, Denial of Service

Severity: High

Scope of Impact: Industry-wide

CVE Identifier: CVE-2024-29979, CVE-2024-29980, CVE-2024-42444

 

Summary Description:

AMI reported a potential vulnerability in BIOS that could allow a local attacker with elevated privileges to execute arbitrary code in System Management Mode (SMM). CVE-2024-42444

Phoenix reported potential vulnerabilities due to unsafe UEFI variable handling in BIOS that could cause temporary denial of service. CVE-2024-29979, CVE-2024-29980

 

Mitigation Strategy for Customers (what you should do to protect yourself):

Update system firmware to the version (or newer) indicated for your model in the Product Impact section.

 

Product Impact:

To download the version specified for your product below, follow these steps:

Navigate to the Drivers & Software support site for your product:

  1. Search for your product by name or machine type.
  2. Click Drivers & Software on the left menu panel.
  3. Click on Manual Update to browse by Component type.
  4. Compare the minimum fix version for your product from the applicable product table below with the latest version posted on the support site.

Lenovo also offers tools to assist with update management as an alternative to the manual steps described above. Refer to the following for additional help:

PC Products and Software: https://support.lenovo.com/us/en/solutions/ht504759

Server and Enterprise Software: https://support.lenovo.com/us/en/solutions/lnvo-lxcaupd and https://datacentersupport.lenovo.com/us/en/documents/lnvo-center

 

References:

https://www.ami.com/security-center/

https://www.phoenix.com/phoenix-security-notifications/cve-2024-29979

https://www.phoenix.com/phoenix-security-notifications/cve-2024-29980

 

Revision History:

Revision Date Description
6 2025-02-27 Updated Product Impact
5 2025-02-13 Updated Product Impact
4 2025-02-06 Updated Product Impact
3 2025-01-23 Updated Product Impact
2 2025-01-16 Updated Product Impact
1 2025-01-14 Initial release

For a complete list of all Lenovo Product Security Advisories, click here.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.

 

Click below links to view affected products:

Desktop

Hyperscale

Smart Edge

Smart Office

ThinkPad

ThinkStation

ThinkSystem

 

Product Impact:

Desktop

Product Component Minimum Fixed Version Target availability
M90n-1 Desktop (ThinkCentre) Flash BIOS Update - ThinkCentre M90n-1 TBD 2025-04-30

 

Hyperscale

Product Component Minimum Fixed Version
HR610X (Hyperscale) BIOS - ThinkSystem HR610X/HR630X/HR650X HR6N0672
HR630X (HyperScale) BIOS - ThinkSystem HR610X/HR630X/HR650X HR6N0672
HR650X (Hyperscale) BIOS - ThinkSystem HR610X/HR630X/HR650X HR6N0672

 

Smart Edge

Product Component Minimum Fixed Version Target availability
ThinkEdge SE10 Bios for Win10 IOT 64bit, Win11 IOT 64bit - ThinkEdge SE10 M4XKT1AA  
ThinkEdge SE30 Bios for Windows 10 (64-bit), Windows 11 (64-bit) - ThinkEdge SE30 TBD 2025-04-30

 

Smart Office

Product Component Minimum Fixed Version Target availability
ThinkSmart Core & IP Controller Full Room Kit: Microsoft Teams Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & IP Controller Full Room Kit: Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms/Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & IP Controller Kit: Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Microsoft Teams Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & ThinkSmart Controller Kit: Microsoft Teams Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core & ThinkSmart Controller Kit: Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core Controller Kit & Bar 180 BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core Device for Logitech BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core Device for Poly BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core Device: Zoom Rooms BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Core IP Controller Kit & Bar 180 BIOS update for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Core TBD 2025-04-30
ThinkSmart Hub Teams BIOS update for Windows 10 IoT (64-bit), Windows 11 IoT (64-bit) - ThinkSmart Hub Teams, ThinkSmart Hub Zoom TBD 2025-04-30
ThinkSmart Hub Zoom BIOS update for Windows 10 IoT (64-bit), Windows 11 IoT (64-bit) - ThinkSmart Hub Teams, ThinkSmart Hub Zoom TBD 2025-04-30
ThinkSmart One & IP Controller: Microsoft Teams Rooms Bios for Windows IoT 10 (64-bit) (version 21H2) - ThinkSmart One Series TBD 2025-04-30
ThinkSmart One & IP Controller: Zoom Rooms Bios for Windows IoT 10 (64-bit) (version 21H2) - ThinkSmart One Series TBD 2025-04-30
ThinkSmart One & ThinkSmart Controller: Microsoft Teams Rooms Bios for Windows IoT 10 (64-bit) (version 21H2) - ThinkSmart One Series TBD 2025-04-30
ThinkSmart One & ThinkSmart Controller: Zoom Rooms Bios for Windows IoT 10 (64-bit) (version 21H2) - ThinkSmart One Series TBD 2025-04-30

 

ThinkPad

Product Component Minimum Fixed Version Target availability
11e Yoga Gen 6 (Type 20SE, 20SF) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit) - ThinkPad 11e Yoga Gen 6 1.49  
E14 (Type 20RA, 20RB) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad E14, E15 1.29  
E15 (Type 20RD, 20RE) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad E14, E15 1.29  
L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 64-bit (Version 1507 or later) - ThinkPad L13, L13 Yoga 1.42  
L13 Yoga (type 20R5, 20R6) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 64-bit (Version 1507 or later) - ThinkPad L13, L13 Yoga 1.42  
L14 (type 20U1, 20U2) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11 (64-bit), 10 (64-bit) - ThinkPad L14 Gen 1 (Type 20U1, 20U2), L15 Gen 1 (Type 20U3, 20U4) 1.26  
L15 (type 20U3, 20U4) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11 (64-bit), 10 (64-bit) - ThinkPad L14 Gen 1 (Type 20U1, 20U2), L15 Gen 1 (Type 20U3, 20U4) 1.26  
L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (Version 1507 or later) - ThinkPad L390 (Type 20NR, 20NS), L390 Yoga (Type 20NT, 20NU) 1.49  
L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (Version 1507 or later) - ThinkPad L390 (Type 20NR, 20NS), L390 Yoga (Type 20NT, 20NU) 1.49  
L570 (type 20J8, 20J9) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10, 8.1 (64-bit), 7 (32-bit, 64-bit) - ThinkPad L570 1.63  
L570 (type 20JQ, 20JR) Laptops (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10, 8.1 (64-bit), 7 (32-bit, 64-bit) - ThinkPad L570 1.63  
P1 Gen 1 (Type 20MD, 20ME) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P1 Gen 1, X1 Extreme Gen 1 1.48  
P1 Gen 2 (Type 20QT, 20QU) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P1 Gen 2 (Type 20QT, 20QU), X1 Extreme 2nd Gen (Type 20QV, 20QW) 1.52  
P1 Gen 3 (type 20TH, 20TJ ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit), Linux - ThinkPad P1 Gen 3, ThinkPad X1 Extreme Gen 3 1.34  
P14s Gen 1 (type 20S4, 20S5) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P14s Gen 1, P15s Gen 1, T14 Gen 1, T15 Gen 1 TBD 2025-03-31
P15 Gen 1 (type 20ST, 20SU) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P15 Gen 1, P15v Gen 1, P17 Gen 1, T15g Gen 1 , T15p Gen 1 1.40  
P15s Gen 1 (type 20T4 20T5) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P14s Gen 1, P15s Gen 1, T14 Gen 1, T15 Gen 1 TBD 2025-03-31
P15v Gen 1 type (20TQ, 20TR) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P15 Gen 1, P15v Gen 1, P17 Gen 1, T15g Gen 1 , T15p Gen 1 1.40  
P17 Gen 1 (type 20SN, 20SQ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P15 Gen 1, P15v Gen 1, P17 Gen 1, T15g Gen 1 , T15p Gen 1 1.40  
P43s (Type 20RH, 20RJ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
P51 (Type 20HH, 20HJ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10, 7 (64-bit) - ThinkPad P51 1.65  
P51 (Type 20MM, 20MN) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10, 7 (64-bit) - ThinkPad P51 1.65  
P52 (Type 20M9, 20MA) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P52, P72 TBD 2025-03-31
P52s (Type 20LB, 20LC) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P52s, T580 1.40  
P53 (Type 20QN, 20QQ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P53, P73 1.46  
P53s (Type 20N6, 20N7) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
P71 (type 20HK, 20HL) Laptop (Thinkpad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit) - ThinkPad P71 1.44  
P72 (type 20MB, 20MC) Laptop (Thinkpad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P52, P72 TBD 2025-03-31
P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P53, P73 1.46  
T14 Gen 1 (type 20S0, 20S1) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P14s Gen 1, P15s Gen 1, T14 Gen 1, T15 Gen 1 TBD 2025-03-31
T14 Gen 1 (type 20S2, 20S3) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P14s Gen 1, P15s Gen 1, T14 Gen 1, T15 Gen 1 TBD 2025-03-31
T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T14s Gen 1, X13 Gen 1 1.34  
T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P14s Gen 1, P15s Gen 1, T14 Gen 1, T15 Gen 1 TBD 2025-03-31
T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P15 Gen 1, P15v Gen 1, P17 Gen 1, T15g Gen 1 , T15p Gen 1 1.40  
T15p Gen 1 (type 20TN 20TM) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P15 Gen 1, P15v Gen 1, P17 Gen 1, T15g Gen 1 , T15p Gen 1 1.40  
T480 (Type 20L5, 20L6) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T480 1.52  
T480s (type 20L7, 20L8) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T480s 1.58  
T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
T490 (Type 20RY, 20RX) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
T490 Type 20Q9, 20QH Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
T490s (Type 20NX, 20NY) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490s, X390 1.85/1.30  
T580 (Type 20L9, 20LA) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P52s, T580 1.40  
T590 (Type 20N4, 20N5) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490, T590, P53s, P43s TBD 2025-03-31
ThinkPad S3 2nd Gen type 20RG China only BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad E14, E15 1.29  
X1 Carbon 5th Gen - Kabylake (Type 20HR, 20HQ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit), 8.1, 7 - ThinkPad X1 Carbon (Type 20HQ, 20HR, 20K3, 20K4) 1.63  
X1 Carbon 5th Gen - Skylake (Type 20K4, 20K3) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit), 8.1, 7 - ThinkPad X1 Carbon (Type 20HQ, 20HR, 20K3, 20K4) 1.63  
X1 Carbon 7th Gen - (Type 20QD, 20QE) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon 7th Gen, X1 Yoga 4th Gen 1.63/1.52  
X1 Carbon 7th Gen - (Type 20R1, 20R2) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon 7th Gen, X1 Yoga 4th Gen 1.63/1.52  
X1 Carbon 8th Gen - (Type 20U9, 20UA) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon Gen 8, ThinkPad X1 Yoga Gen 5 1.37/1.16  
X1 Extreme 1st Gen (Type 20MF, 20MG) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P1 Gen 1, X1 Extreme Gen 1 1.48  
X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad P1 Gen 2 (Type 20QT, 20QU), X1 Extreme 2nd Gen (Type 20QV, 20QW) 1.52  
X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit), Linux - ThinkPad P1 Gen 3, ThinkPad X1 Extreme Gen 3 1.34  
X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Yoga 3rd Gen (Types 20LD, 20LE, 20LF, 20LG) 1.54  
X1 Yoga 4th Gen (Type 20QF, 20QG) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon 7th Gen, X1 Yoga 4th Gen 1.63/1.52  
X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon 7th Gen, X1 Yoga 4th Gen 1.63/1.52  
X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X1 Carbon Gen 8, ThinkPad X1 Yoga Gen 5 1.37/1.16  
X13 (Type 20T2, 20T3) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T14s Gen 1, X13 Gen 1 1.34  
X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X13 Yoga Gen 1 (Type 20SX, 20SY) 1.53  
X280 (Type 20KF, 20KE) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X280 1.55  
X380 Yoga (Type 20LH, 20LJ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 10 (64-bit) - ThinkPad X380 Yoga 1.41  
X390 (Type 20Q0, 20Q1) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490s, X390 1.85/1.30  
X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad T490s, X390 1.85/1.30  
X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS Update (Utility & Bootable CD) for Windows 11, 10 (64-bit) - ThinkPad X390 Yoga 2.01  

 

ThinkStation

Product Component Minimum Fixed Version Target availability
P3 Tiny Workstation (ThinkStation) Flash BIOS Update - ThinkStation P3 Tiny TBD 2025-03-30

 

ThinkSystem

Product Component Minimum Fixed Version Target availability
SR635 (ThinkSystem) Lenovo ThinkSystem SR635/SR655 UEFI Firmware TBD 2025-03-18
SR655 (ThinkSystem) Lenovo ThinkSystem SR635/SR655 UEFI Firmware TBD 2025-03-18

别名号:LEN-183647
文件ID:PS500680
初始发布日期:01/14/2025
最近修改日期:02/27/2025