Login Request a demo
SS
Product
SMM, SMM2, FPC
by Lenovo · last CVE Apr 15, 2024
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 4Medium 0Low 0
Severity
All severities4Critical0High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SMM, SMM2, FPC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4856
8.8
1%
Apr 15
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint
Affected: various
CVE-2023-4857
7.5
1%
Apr 15
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of…
Affected: various
CVE-2024-2659
7.2
1%
Apr 15
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a…
Affected: various
CVE-2023-4855
7.2
1%
Apr 15
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI
Affected: various
Showing 4