CVE-2023-4855

No fix known EPSS 1%CVSS 7.2

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.

Published 2024-04-15 · CVE record · OSV

Products: Lenovo SMM, SMM2, FPC, lenovo fan_power_controller, lenovo system_management_module_firmware