Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-2659

CVE-2024-2659

Description

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo SMM, SMM2, FPC

Default version status: unaffected

  • variousaffected

References