8.8
Élevée
CVE-2023-4856 A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute…
Description
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SMM, SMM2, FPC | Versions non publiées | |
| fan_power_controller | Versions non publiées | |
| system_management_module_firmware 1.24 | 1.24 → dernières | Pas de correctif indiqué |
Autres CVE de SMM, SMM2, FPC
Les 4 CVE de SMM, SMM2, FPC →
CVE-2024-2659
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
7.2
Élevée
CVE-2023-4857
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to…
7.5
Élevée
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with…
7.2
Élevée