Lenovo SMM, SMM2, FPC

• CVE-2024-2659 High 7.2 A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrati 1.1%
• CVE-2023-4857 High 7.5 An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system informatio 0.5%
• CVE-2023-4856 High 8.8 A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint. 0.7%
• CVE-2023-4855 High 7.2 A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI. 1.1%