7.2
CVE-2024-2659
- EPSS 1.13%
- Veröffentlicht 15.04.2024 18:15:10
- Zuletzt bearbeitet 28.07.2025 13:06:05
- Erkennungen
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Nextscale N1200 Enclosure Firmware Version < FHET62A-3.50
Lenovo ≫ Thinkagile Cp-cb-10 Firmware Version < TESM40B-1.27
Lenovo ≫ Thinkagile Cp-cb-10e Firmware Version < TESM40B-1.27
Lenovo ≫ Thinkagile Hx Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3721 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1021 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx E1 Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx E2 Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx2321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx2331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx630 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3376 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx645 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1521-r Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3521-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5521 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5521-c Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7521 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx650 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx665 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7821 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3720 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile 2u4n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx1320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 1se Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7320-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 1u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2330 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3330 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7330-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx630 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx630 V4 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx635 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2375 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3375 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7375-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3376 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx645 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3520-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 2u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3530-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5530 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7530 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx650 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx650 V4 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx655 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5575 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7575 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3575-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx665 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx850 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 4u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7820 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinksystem D2 Enclosure Firmware Version < TESM40B-1.27
Lenovo ≫ Thinksystem Da240 Firmware Version < UMSM12I-1.1.3
Lenovo ≫ Thinksystem Dw612 Firmware Version < UMSM12I-1.1.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.13% | 0.622 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| Lenovo | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
https://support.lenovo.com/us/en/product_security/LEN-140420