Skip to content
OpenAdvisories
High · 7.2 CVE-2024-2659 EUVD-2024-27607GHSA-6rqw-3wpr-8qcj

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to exe…

Published Apr 15, 2024 · Updated Aug 27, 2025 · Assigned by lenovo

Description

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

Affected products

VendorProductAffectedFixed
Lenovo SMM, SMM2, FPC various —

References