PT-2023-22477 · Fpc+2 · Fpc+2

Published 2023-06-26 · Updated 2024-09-16 · CVE-2023-2992

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SMM v1 (affected versions not specified) SMM v2 (affected versions not specified) FPC (affected versions not specified)

Description An unauthenticated denial of service issue exists in the management web server of the affected products, which can be triggered under crafted conditions. Rebooting the affected component will restore access to the management web server.

Recommendations For SMM v1, reboot the system to restore access to the management web server. For SMM v2, reboot the system to restore access to the management web server. For FPC, reboot the system to restore access to the management web server. As a temporary workaround, consider restricting access to the management web server to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-405

Related Identifiers

CVE-2023-2992

Affected Products

Fpc

Smm V1

Smm V2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-2992 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-127357 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-2992 · Vendor Advisory
• https://t.me/cvenotify/94757 · Telegram Post
• https://t.me/cvenotify/53057 · Telegram Post