Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-4856

CVE-2023-4856

Description

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo SMM, SMM2, FPC

Default version status: unaffected

  • variousaffected

References