HIGH🇵🇱 Wersja polska

CVE-2024-2659

CVSS 7.2v3.1pub. 2024-04-15upd. 2025-07-28

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Nextscale N1200 Enclosure

    HW
    Lenovo
    all versions

  • Lenovo Nextscale N1200 Enclosure Firmware

    OS
    Lenovo
    < FHET62A-3.50

  • Lenovo Thinkagile 2u4n

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile 2u4n Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Cp Cb 10

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Cp Cb 10e

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Cp Cb 10e Firmware

    OS
    Lenovo
    < TESM40B-1.27

  • Lenovo Thinkagile Cp Cb 10 Firmware

    OS
    Lenovo
    < TESM40B-1.27

  • Lenovo Thinkagile Hx1021

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx1021 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx1321

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx1321 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx1331

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx1331 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx1521 R

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx1521 R Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx2321

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx2321 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx2331

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx2331 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx3321

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx3321 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx3331

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx3331 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx3376

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx3376 Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx3521 G

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx3521 G Firmware

    OS
    Lenovo
    < tesm40b-1.27

  • Lenovo Thinkagile Hx3721

    HW
    Lenovo
    all versions

  • Lenovo Thinkagile Hx3721 Firmware

    OS
    Lenovo
    < tesm40b-1.27
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2021-3849CRITICAL9.8PL ✓same product

Auth Bypass w firmware Lenovo FPC2 i SMM — zdalne wykonanie poleceń

CVE-2021-3897CRITICAL9.8PL ✓same product

Auth Bypass w firmware Lenovo FPC2 i SMM — nieautoryzowane wykonanie poleceń

CVE-2023-4607HIGH7.5same product

An authenticated XCC user can change permissions for any user through a crafted API command.

CVE-2023-4606HIGH8.1same product

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted A...

CVE-2023-2992HIGH7.5same product

An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web serve...