Skip to content
OpenAdvisories
High · 7.5 CVE-2023-4857 EUVD-2023-54697GHSA-877w-cfhh-j9x8

An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI ca…

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by lenovo

Description

An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information.

Affected products

VendorProductAffectedFixed
Lenovo SMM, SMM2, FPC various —

References