Skip to content
OpenAdvisories
High · 8.8 CVE-2023-4856 EUVD-2023-54696GHSA-3962-w3j2-98vq

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a …

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by lenovo

Description

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.

Affected products

VendorProductAffectedFixed
Lenovo SMM, SMM2, FPC various —

References