CVE-2023-2992
Estado: ModificadaAlta (7.5)—
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.62%
- Percentil entre todas las CVEs puntuadas: 48
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
Lenovo — Nextscale N1200 Enclosure FirmwareLenovo — Thinkagile Cp-cb-10 FirmwareLenovo — Thinkagile Cp-cb-10e FirmwareLenovo — Thinkagile HX Enclosure Certified Node FirmwareLenovo — Thinkagile VX Enclosure FirmwareLenovo — Thinksystem D2 Enclosure FirmwareLenovo — Thinksystem Da240 Enclosure FirmwareLenovo — Thinksystem Dw612 Enclosure Firmware
CWE
- CWE-405
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-2992",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-2992",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-04-19T18:18:54.770375Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@lenovo.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@lenovo.com",
"affectedData": [
{
"vendor": "Lenovo",
"product": "System Management Module (SMM)",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lenovo",
"product": "Fan Power Controller (FPC)",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:o:lenovo:nextscale_n1200_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "nextscale_n1200_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "fhet60b-3.40",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinkagile_cp-cb-10e_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinkagile_cp-cb-10e_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinkagile_cp-cb-10_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinkagile_cp-cb-10_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinkagile_hx_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinkagile_vx_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinkagile_vx_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinksystem_d2_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinksystem_d2_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinksystem_da240_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinksystem_da240_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:lenovo:thinksystem_dw612_enclosure_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "lenovo",
"product": "thinksystem_dw612_enclosure_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "tesm38c-1.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2023-06-26T20:15:09.933",
"references": [
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-127357",
"tags": [
"Vendor Advisory"
],
"source": "psirt@lenovo.com"
},
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-127357",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@lenovo.com",
"description": [
{
"lang": "en",
"value": "CWE-405"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server."
}
],
"lastModified": "2026-06-17T05:53:57.857",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:nextscale_n1200_enclosure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E20036ED-CC11-4093-847B-E324D5D18B04",
"versionEndExcluding": "fhet60b-3.40"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:nextscale_n1200_enclosure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "21BACC24-DDE4-4016-97DE-60C51E5F1AC6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkagile_cp-cb-10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7813CA0F-7081-4B35-A502-D7E960121989",
"versionEndExcluding": "tesm38c-1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_cp-cb-10:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CE24C16-2F33-4BD1-8E0F-8AB009842AB6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkagile_cp-cb-10e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C29AD224-2715-4B91-8F17-244C396833AA",
"versionEndExcluding": "tesm38c-1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_cp-cb-10e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1BEF2683-FE65-4600-818F-25867008381E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A26434A-500B-4B9C-8880-E975167448EC",
"versionEndExcluding": "tesm38c-1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_hx_enclosure_certified_node:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "41B43352-1245-46E2-A167-47B2E629BFA7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkagile_vx_enclosure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BECD4703-45C9-4A7A-9F39-E1BE738A6E21",
"versionEndExcluding": "tesm38c-1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkagile_vx_enclosure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C425D71A-19B5-4983-B95C-B5CB6EB7C065"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinksystem_d2_enclosure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F17F2C1C-0F16-49A0-B84E-DDE31CD33D38",
"versionEndExcluding": "tesm38c-1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_d2_enclosure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A78D856-B4DF-4B79-9901-434AE6FCE240"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinksystem_da240_enclosure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D8F59EB-B8B7-4472-848E-4236C308244C",
"versionEndExcluding": "umsm10s-1.07"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_da240_enclosure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B1A2C8EE-897D-4A4A-A9EB-AEEDA427D0C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinksystem_dw612_enclosure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7A82172-9767-4BB1-A399-082572B03002",
"versionEndExcluding": "umsm10s-1.07"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinksystem_dw612_enclosure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0EC0CC24-36CA-4C52-B149-F5FD48D8BB8A"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@lenovo.com"
}