Lucene search

K
nvd[email protected]NVD:CVE-2023-2992
HistoryJun 26, 2023 - 8:15 p.m.

CVE-2023-2992

2023-06-2620:15:09
CWE-400
web.nvd.nist.gov
unauthenticated
denial of service
smm
fpc
web server
vulnerability
crafted conditions
reboot

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.9%

An unauthenticated Β denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.

Affected configurations

NVD
Node
lenovonextscale_n1200_enclosure_firmwareRange<fhet60b-3.40
AND
lenovonextscale_n1200_enclosureMatch-
Node
lenovothinkagile_cp-cb-10_firmwareRange<tesm38c-1.26
AND
lenovothinkagile_cp-cb-10Match-
Node
lenovothinkagile_cp-cb-10e_firmwareRange<tesm38c-1.26
AND
lenovothinkagile_cp-cb-10eMatch-
Node
lenovothinkagile_hx_enclosure_certified_node_firmwareRange<tesm38c-1.26
AND
lenovothinkagile_hx_enclosure_certified_nodeMatch-
Node
lenovothinkagile_vx_enclosure_firmwareRange<tesm38c-1.26
AND
lenovothinkagile_vx_enclosureMatch-
Node
lenovothinksystem_d2_enclosure_firmwareRange<tesm38c-1.26
AND
lenovothinksystem_d2_enclosureMatch-
Node
lenovothinksystem_da240_enclosure_firmwareRange<umsm10s-1.07
AND
lenovothinksystem_da240_enclosureMatch-
Node
lenovothinksystem_dw612_enclosure_firmwareRange<umsm10s-1.07
AND
lenovothinksystem_dw612_enclosureMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.9%

Related for NVD:CVE-2023-2992