Описание
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Связанные уязвимости
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Уязвимость модулей управления системой (System Management Module -SMM/SMM2) и контроллера питания вентилятора (Fan Power Controller - FPC) микропрограммного обеспечения систем хранения данных Lenovo ThinkSystem, ThinkAgile, NeXtScale и ноутбуков Lenovo CP-CB-10, позволяющая нарушителю выполнять произвольные команды