7.2
High
CVE-2023-4855 A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
Description
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SMM, SMM2, FPC | Versions not published | |
| fan_power_controller | Versions not published | |
| system_management_module_firmware 1.24 | 1.24 → latest | No fix stated |
Other CVEs of SMM, SMM2, FPC
The 4 CVEs of SMM, SMM2, FPC →
CVE-2024-2659
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
7.2
High
CVE-2023-4857
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to…
7.5
High
CVE-2023-4856
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute…
8.8
High