high7.5
CVE-2023-2992
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions.
Impact
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Nextscale N1200 Enclosure Firmware | before fhet60b-3.40 |
| Lenovo | Thinkagile Cp-Cb-10 Firmware | before tesm38c-1.26 |
| Lenovo | Thinkagile Cp-Cb-10e Firmware | before tesm38c-1.26 |
| Lenovo | Thinkagile Hx Enclosure Certified Node Firmware | before tesm38c-1.26 |
| Lenovo | Thinkagile Vx Enclosure Firmware | before tesm38c-1.26 |
| Lenovo | Thinksystem D2 Enclosure Firmware | before tesm38c-1.26 |
| Lenovo | Thinksystem Da240 Enclosure Firmware | before umsm10s-1.07 |
| Lenovo | Thinksystem Dw612 Enclosure Firmware | before umsm10s-1.07 |