Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hp9h-gmr9-r5h4

Опубликовано: 23 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

EPSS

Процентиль: 58%
0.00364
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

EPSS

Процентиль: 58%
0.00364
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287