{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"System Management Module (SMM) ","vendor":"Lenovo","versions":[{"status":"affected","version":"various"}]},{"defaultStatus":"unaffected","product":"Fan Power Controller (FPC)","vendor":"Lenovo","versions":[{"status":"affected","version":"various"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:nextscale_n1200_enclosure_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E20036ED-CC11-4093-847B-E324D5D18B04","versionEndExcluding":"fhet60b-3.40","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:nextscale_n1200_enclosure:-:*:*:*:*:*:*:*","matchCriteriaId":"21BACC24-DDE4-4016-97DE-60C51E5F1AC6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkagile_cp-cb-10_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7813CA0F-7081-4B35-A502-D7E960121989","versionEndExcluding":"tesm38c-1.26","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkagile_cp-cb-10:-:*:*:*:*:*:*:*","matchCriteriaId":"2CE24C16-2F33-4BD1-8E0F-8AB009842AB6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkagile_cp-cb-10e_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C29AD224-2715-4B91-8F17-244C396833AA","versionEndExcluding":"tesm38c-1.26","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkagile_cp-cb-10e:-:*:*:*:*:*:*:*","matchCriteriaId":"1BEF2683-FE65-4600-818F-25867008381E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4A26434A-500B-4B9C-8880-E975167448EC","versionEndExcluding":"tesm38c-1.26","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkagile_hx_enclosure_certified_node:-:*:*:*:*:*:*:*","matchCriteriaId":"41B43352-1245-46E2-A167-47B2E629BFA7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkagile_vx_enclosure_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BECD4703-45C9-4A7A-9F39-E1BE738A6E21","versionEndExcluding":"tesm38c-1.26","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkagile_vx_enclosure:-:*:*:*:*:*:*:*","matchCriteriaId":"C425D71A-19B5-4983-B95C-B5CB6EB7C065","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinksystem_d2_enclosure_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F17F2C1C-0F16-49A0-B84E-DDE31CD33D38","versionEndExcluding":"tesm38c-1.26","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinksystem_d2_enclosure:-:*:*:*:*:*:*:*","matchCriteriaId":"8A78D856-B4DF-4B79-9901-434AE6FCE240","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinksystem_da240_enclosure_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1D8F59EB-B8B7-4472-848E-4236C308244C","versionEndExcluding":"umsm10s-1.07","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinksystem_da240_enclosure:-:*:*:*:*:*:*:*","matchCriteriaId":"B1A2C8EE-897D-4A4A-A9EB-AEEDA427D0C8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinksystem_dw612_enclosure_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A82172-9767-4BB1-A399-082572B03002","versionEndExcluding":"umsm10s-1.07","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinksystem_dw612_enclosure:-:*:*:*:*:*:*:*","matchCriteriaId":"0EC0CC24-36CA-4C52-B149-F5FD48D8BB8A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM v2, and FPC that the user does not normally have sufficient privileges to execute."}],"id":"CVE-2023-2993","lastModified":"2026-06-17T05:53:58.023","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2993","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-11-06T21:46:22.855451Z","version":"2.0.3"}}]},"published":"2023-06-26T20:15:10.000","references":[{"source":"psirt@lenovo.com","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-127357"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-127357"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-281"}],"source":"psirt@lenovo.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-281"}],"source":"nvd@nist.gov","type":"Primary"}]}