high7.2
CVE-2024-2659
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands…
Impact
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Nextscale N1200 Enclosure Firmware | before FHET62A-3.50 |
| Lenovo | Thinkagile Cp-Cb-10 Firmware | before TESM40B-1.27 |
| Lenovo | Thinkagile Cp-Cb-10e Firmware | before TESM40B-1.27 |
| Lenovo | Thinkagile Hx Enclosure Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx3721 Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx1021 Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx E1 Enclosure Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx E2 Enclosure Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx1321 Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx2321 Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx3321 Firmware | before tesm40b-1.27 |
| Lenovo | Thinkagile Hx1331 Firmware | before tesm40b-1.27 |