CVEvulnerability
CVE-2024-2659
7.2 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Affected configurations
• lenovo nextscale n1200 enclosure firmware (< FHET62A-3.50)
• lenovo thinkagile cp-cb-10 firmware (< TESM40B-1.27)
• lenovo thinkagile cp-cb-10e firmware (< TESM40B-1.27)
• lenovo thinkagile hx enclosure firmware (< tesm40b-1.27)
• lenovo thinkagile hx3721 firmware (< tesm40b-1.27)
• lenovo thinkagile hx1021 firmware (< tesm40b-1.27)
• lenovo thinkagile hx e1 enclosure firmware (< tesm40b-1.27)
• lenovo thinkagile hx e2 enclosure firmware (< tesm40b-1.27)
• lenovo thinkagile hx1321 firmware (< tesm40b-1.27)
• lenovo thinkagile hx2321 firmware (< tesm40b-1.27)
• lenovo thinkagile hx3321 firmware (< tesm40b-1.27)
• lenovo thinkagile hx1331 firmware (< tesm40b-1.27)
• lenovo thinkagile hx2331 firmware (< tesm40b-1.27)
• lenovo thinkagile hx3331 firmware (< tesm40b-1.27)
• lenovo thinkagile hx630 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile hx3376 firmware (< tesm40b-1.27)
• lenovo thinkagile hx645 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile hx1521-r firmware (< tesm40b-1.27)
• lenovo thinkagile hx3521-g firmware (< tesm40b-1.27)
• lenovo thinkagile hx5521 firmware (< tesm40b-1.27)
• lenovo thinkagile hx5521-c firmware (< tesm40b-1.27)
• lenovo thinkagile hx7521 firmware (< tesm40b-1.27)
• lenovo thinkagile hx5531 firmware (< tesm40b-1.27)
• lenovo thinkagile hx7531 firmware (< tesm40b-1.27)
• lenovo thinkagile hx650 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile hx665 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile hx7821 firmware (< tesm40b-1.27)
• lenovo thinkagile vx3720 firmware (< tesm40b-1.27)
• lenovo thinkagile 2u4n firmware (< tesm40b-1.27)
• lenovo thinkagile vx1320 firmware (< tesm40b-1.27)
• lenovo thinkagile vx 1se firmware (< tesm40b-1.27)
• lenovo thinkagile vx3320 firmware (< tesm40b-1.27)
• lenovo thinkagile vx2320 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7320-n firmware (< tesm40b-1.27)
• lenovo thinkagile vx 1u firmware (< tesm40b-1.27)
• lenovo thinkagile vx2330 firmware (< tesm40b-1.27)
• lenovo thinkagile vx3330 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7330-n firmware (< tesm40b-1.27)
• lenovo thinkagile vx3331 firmware (< tesm40b-1.27)
• lenovo thinkagile vx630 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile vx630 v4 firmware (< tesm40b-1.27)
• lenovo thinkagile vx635 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile vx2375 firmware (< tesm40b-1.27)
• lenovo thinkagile vx3375 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7375-n firmware (< tesm40b-1.27)
• lenovo thinkagile vx3376 firmware (< tesm40b-1.27)
• lenovo thinkagile vx645 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile vx5520 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7520 firmware (< tesm40b-1.27)
• lenovo thinkagile vx3520-g firmware (< tesm40b-1.27)
• lenovo thinkagile vx 2u firmware (< tesm40b-1.27)
• lenovo thinkagile vx3530-g firmware (< tesm40b-1.27)
• lenovo thinkagile vx5530 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7530 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7531 firmware (< tesm40b-1.27)
• lenovo thinkagile vx650 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile vx650 v4 firmware (< tesm40b-1.27)
• lenovo thinkagile vx655 v3 firmware (< tesm40b-1.27)
• lenovo thinkagile vx5575 firmware (< tesm40b-1.27)
• lenovo thinkagile vx7575 firmware (< tesm40b-1.27)
… and 8 more
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-140420 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-140420 Vendor Advisory