> CVE-2024-2659 [HIGH]

« BACK_TO_HOME
PUBLISHED
2024-04-15 18:15
MODIFIED
2025-07-28 13:06
CVSS_SCORE V3
7.2
EPSS (Prob. Exploit)
1.13%
Top 33.8%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.

> AFFECTED_PRODUCTS

Lenovo - Nextscale N1200 Enclosure Firmware
< FHET62A-3.50
Lenovo - Thinksystem D2 Enclosure Firmware
< TESM40B-1.27
Lenovo - Thinkagile Vx3331 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx1021 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx1321 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx1521 R Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx2321 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx3321 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx3376 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx3521 G Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx3721 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx5521 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx5521 C Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx7521 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx7821 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx 4u Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx1320 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx2320 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx2330 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3320 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3330 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3520 G Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3530 G Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3720 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx5520 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx5530 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7320 N Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7520 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7530 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7531 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7820 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx1331 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx2331 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx3331 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx5531 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx7531 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx 1se Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx 1u Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx 2u Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx Enclosure Firmware
< tesm40b-1.27
Lenovo - Thinkagile Cp Cb 10 Firmware
< TESM40B-1.27
Lenovo - Thinkagile Cp Cb 10e Firmware
< TESM40B-1.27
Lenovo - Thinkagile Hx E1 Enclosure Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx E2 Enclosure Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx630 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx645 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx650 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Hx665 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile 2u4n Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7330 N Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx630 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx630 V4 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx635 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx2375 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3375 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7375 N Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3376 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx645 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx650 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx650 V4 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx655 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx5575 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx7575 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx3575 G Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx665 V3 Firmware
< tesm40b-1.27
Lenovo - Thinkagile Vx850 V3 Firmware
< tesm40b-1.27
Lenovo - Thinksystem Da240 Firmware
< UMSM12I-1.1.3
Lenovo - Thinksystem Dw612 Firmware
< UMSM12I-1.1.3

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Network (N)
Exploit possible à distance via réseau (HTTP, API, etc.)
AC (Complexité d'Attaque)
Attack Complexity
Low (L)
Peu de conditions requises pour exploiter
PR (Privilèges Requis)
Privileges Required
High (H)
Authentifié avec privilèges administratifs
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Unchanged (U)
Impact reste dans le périmètre du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
High (H)
Divulgation totale d'informations
I (Impact Intégrité)
Integrity Impact
High (H)
Modification totale des données possible
A (Impact Disponibilité)
Availability Impact
High (H)
Interruption totale du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité
High
Divulgation totale d'informations
Intégrité
High
Modification totale des données possible
Disponibilité
High
Interruption totale du service possible

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/04/2024 18:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:50
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME