Skip to content
7.5 High

CVE-2023-2992 An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which…

Description

An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.

Affected products and versions

Product Affected versions Fixed in
System Management Module (SMM) Versions not published
Fan Power Controller (FPC) Versions not published
nextscale_n1200_enclosure_firmware Versions not published
thinkagile_cp-cb-10e_firmware Versions not published
thinkagile_cp-cb-10_firmware Versions not published
thinkagile_hx_enclosure_firmware Versions not published
thinkagile_vx_enclosure_firmware Versions not published
thinksystem_d2_enclosure_firmware Versions not published
thinksystem_da240_enclosure_firmware Versions not published
Show the other branch
Product Affected versions Fixed in
thinksystem_dw612_enclosure_firmware Versions not published
The 2 CVEs of System Management Module (SMM) →
Track this CVE