8.8
High
CVE-2023-4856 A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute…
Description
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SMM, SMM2, FPC | Versions not published | |
| fan_power_controller | Versions not published | |
| system_management_module_firmware 1.24 | 1.24 → latest | No fix stated |
Other CVEs of SMM, SMM2, FPC
The 4 CVEs of SMM, SMM2, FPC →
CVE-2024-2659
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
7.2
High
CVE-2023-4857
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to…
7.5
High
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
7.2
High