Skip to content
OpenAdvisories
High · 7.2 CVE-2023-4855 EUVD-2023-54695GHSA-95x7-f98q-fqqq

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to exe…

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by lenovo

Description

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.

Affected products

VendorProductAffectedFixed
Lenovo SMM, SMM2, FPC various —

References