CVE-2024-2659

No fix known EPSS 1%CVSS 7.2

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

Published 2024-04-15 · CVE record · OSV

Products: Lenovo SMM, SMM2, FPC, lenovo fan_power_controller, lenovo system_management_module_firmware