CVEvulnerability

CVE-2024-2659

7.2 HIGH Published 2024-04-15 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

Affected configurations

• lenovo nextscale n1200 enclosure firmware (< FHET62A-3.50) • lenovo thinkagile cp-cb-10 firmware (< TESM40B-1.27) • lenovo thinkagile cp-cb-10e firmware (< TESM40B-1.27) • lenovo thinkagile hx enclosure firmware (< tesm40b-1.27) • lenovo thinkagile hx3721 firmware (< tesm40b-1.27) • lenovo thinkagile hx1021 firmware (< tesm40b-1.27) • lenovo thinkagile hx e1 enclosure firmware (< tesm40b-1.27) • lenovo thinkagile hx e2 enclosure firmware (< tesm40b-1.27) • lenovo thinkagile hx1321 firmware (< tesm40b-1.27) • lenovo thinkagile hx2321 firmware (< tesm40b-1.27) • lenovo thinkagile hx3321 firmware (< tesm40b-1.27) • lenovo thinkagile hx1331 firmware (< tesm40b-1.27) • lenovo thinkagile hx2331 firmware (< tesm40b-1.27) • lenovo thinkagile hx3331 firmware (< tesm40b-1.27) • lenovo thinkagile hx630 v3 firmware (< tesm40b-1.27) • lenovo thinkagile hx3376 firmware (< tesm40b-1.27) • lenovo thinkagile hx645 v3 firmware (< tesm40b-1.27) • lenovo thinkagile hx1521-r firmware (< tesm40b-1.27) • lenovo thinkagile hx3521-g firmware (< tesm40b-1.27) • lenovo thinkagile hx5521 firmware (< tesm40b-1.27) • lenovo thinkagile hx5521-c firmware (< tesm40b-1.27) • lenovo thinkagile hx7521 firmware (< tesm40b-1.27) • lenovo thinkagile hx5531 firmware (< tesm40b-1.27) • lenovo thinkagile hx7531 firmware (< tesm40b-1.27) • lenovo thinkagile hx650 v3 firmware (< tesm40b-1.27) • lenovo thinkagile hx665 v3 firmware (< tesm40b-1.27) • lenovo thinkagile hx7821 firmware (< tesm40b-1.27) • lenovo thinkagile vx3720 firmware (< tesm40b-1.27) • lenovo thinkagile 2u4n firmware (< tesm40b-1.27) • lenovo thinkagile vx1320 firmware (< tesm40b-1.27) • lenovo thinkagile vx 1se firmware (< tesm40b-1.27) • lenovo thinkagile vx3320 firmware (< tesm40b-1.27) • lenovo thinkagile vx2320 firmware (< tesm40b-1.27) • lenovo thinkagile vx7320-n firmware (< tesm40b-1.27) • lenovo thinkagile vx 1u firmware (< tesm40b-1.27) • lenovo thinkagile vx2330 firmware (< tesm40b-1.27) • lenovo thinkagile vx3330 firmware (< tesm40b-1.27) • lenovo thinkagile vx7330-n firmware (< tesm40b-1.27) • lenovo thinkagile vx3331 firmware (< tesm40b-1.27) • lenovo thinkagile vx630 v3 firmware (< tesm40b-1.27) • lenovo thinkagile vx630 v4 firmware (< tesm40b-1.27) • lenovo thinkagile vx635 v3 firmware (< tesm40b-1.27) • lenovo thinkagile vx2375 firmware (< tesm40b-1.27) • lenovo thinkagile vx3375 firmware (< tesm40b-1.27) • lenovo thinkagile vx7375-n firmware (< tesm40b-1.27) • lenovo thinkagile vx3376 firmware (< tesm40b-1.27) • lenovo thinkagile vx645 v3 firmware (< tesm40b-1.27) • lenovo thinkagile vx5520 firmware (< tesm40b-1.27) • lenovo thinkagile vx7520 firmware (< tesm40b-1.27) • lenovo thinkagile vx3520-g firmware (< tesm40b-1.27) • lenovo thinkagile vx 2u firmware (< tesm40b-1.27) • lenovo thinkagile vx3530-g firmware (< tesm40b-1.27) • lenovo thinkagile vx5530 firmware (< tesm40b-1.27) • lenovo thinkagile vx7530 firmware (< tesm40b-1.27) • lenovo thinkagile vx7531 firmware (< tesm40b-1.27) • lenovo thinkagile vx650 v3 firmware (< tesm40b-1.27) • lenovo thinkagile vx650 v4 firmware (< tesm40b-1.27) • lenovo thinkagile vx655 v3 firmware (< tesm40b-1.27) • lenovo thinkagile vx5575 firmware (< tesm40b-1.27) • lenovo thinkagile vx7575 firmware (< tesm40b-1.27) … and 8 more

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References