7.2
CVE-2024-2659
- EPSS 0.43%
- Veröffentlicht 15.04.2024 18:15:10
- Zuletzt bearbeitet 28.07.2025 13:06:05
- Quelle psirt@lenovo.com
- Teams Watchlist Login
- Unerledigt Login
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Nextscale N1200 Enclosure Firmware Version < FHET62A-3.50
Lenovo ≫ Thinkagile Cp-cb-10 Firmware Version < TESM40B-1.27
Lenovo ≫ Thinkagile Cp-cb-10e Firmware Version < TESM40B-1.27
Lenovo ≫ Thinkagile Hx Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3721 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1021 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx E1 Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx E2 Enclosure Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx2321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3321 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx2331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx630 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3376 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx645 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx1521-r Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx3521-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5521 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5521-c Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7521 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx5531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx650 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx665 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Hx7821 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3720 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile 2u4n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx1320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 1se Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2320 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7320-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 1u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2330 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3330 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7330-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3331 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx630 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx630 V4 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx635 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx2375 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3375 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7375-n Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3376 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx645 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3520-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5520 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 2u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3530-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5530 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7530 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7531 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx650 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx650 V4 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx655 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx5575 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7575 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx3575-g Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx665 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx850 V3 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx 4u Firmware Version < tesm40b-1.27
Lenovo ≫ Thinkagile Vx7820 Firmware Version < tesm40b-1.27
Lenovo ≫ Thinksystem D2 Enclosure Firmware Version < TESM40B-1.27
Lenovo ≫ Thinksystem Da240 Firmware Version < UMSM12I-1.1.3
Lenovo ≫ Thinksystem Dw612 Firmware Version < UMSM12I-1.1.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.617 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| psirt@lenovo.com | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.