CVE-2023-2992
- State
- Published
- Severity
- 7.5 High
- Published
- Jun 26, 2023
- Updated
- Sep 16, 2024
- Reserved
- May 30, 2023
Description
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | lenovo |
Weaknesses
- CWE-405 Asymmetric Resource Consumption (Amplification)
Affected Products
| Product | Versions |
|---|---|
System Management Module (SMM)Lenovo |
|
Fan Power Controller (FPC)Lenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.