Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vxqg-r9mf-h85v

Опубликовано: 23 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

EPSS

Процентиль: 66%
0.00507
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

EPSS

Процентиль: 66%
0.00507
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287