CVEvulnerability

CVE-2023-2992

7.5 HIGH Published 2023-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-405

Description

An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.

Affected configurations

• lenovo nextscale n1200 enclosure firmware (< fhet60b-3.40) • lenovo thinkagile cp-cb-10 firmware (< tesm38c-1.26) • lenovo thinkagile cp-cb-10e firmware (< tesm38c-1.26) • lenovo thinkagile hx enclosure certified node firmware (< tesm38c-1.26) • lenovo thinkagile vx enclosure firmware (< tesm38c-1.26) • lenovo thinksystem d2 enclosure firmware (< tesm38c-1.26) • lenovo thinksystem da240 enclosure firmware (< umsm10s-1.07) • lenovo thinksystem dw612 enclosure firmware (< umsm10s-1.07)

Related

Weakness · CWE (1)

  • CWE-405 Asymmetric Resource Consumption (Amplification) weakness

References