Lenovo SMM, Smm2, FPC vulnerabilities

4 vulnerabilities

Known vulnerabilities in Lenovo SMM, Smm2, FPC, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2024-2659lenovonextscale_n1200_enclosure_firmware+68
EPSS score
1.13%
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.8.8CVE-2023-4856lenovosmm, smm2, fpc
EPSS score
0.66%
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.7.2CVE-2023-4855lenovosmm, smm2, fpc
EPSS score
1.13%
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.7.5CVE-2023-4857lenovosmm, smm2, fpc
EPSS score
0.53%
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information.