CVE-2023-2992

Published Jun 26, 2023 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.

Remediation

Vendor Solution

Upgrade to the firmware version (or newer) indicated for your model in the Lenovo Product Security:  https://support.lenovo.com/us/en/product_security/LEN-127357

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-34428 An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.
History
Type Values Removed Values Added
Weaknesses CWE-400
Type Values Removed Values Added
Weaknesses CWE-405