Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductFan Power Controller (24b517ee-4a9e-526a-8054-954bb03a77fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2659 vulnerable 2026-06-08 06:33:31.736633 Details available
HIGH (7.2)
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
Published: 2024-04-15T18:00:12.275Z
Updated: 2025-08-27T20:56:47.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4857 vulnerable 2026-06-08 06:16:14.746166 Details available
HIGH (7.5)
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information.
Published: 2024-04-15T18:00:03.660Z
Updated: 2024-08-02T07:38:00.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4856 vulnerable 2026-06-08 06:16:14.745530 Details available
HIGH (8.8)
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.
Published: 2024-04-15T17:59:50.197Z
Updated: 2024-08-02T07:38:00.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4855 vulnerable 2026-06-08 06:16:14.743140 Details available
HIGH (7.2)
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.
Published: 2024-04-15T17:58:53.588Z
Updated: 2024-08-02T07:38:00.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17833 vulnerable 2026-06-08 05:09:09.970972 Details available
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
Published: 2018-04-23T18:00:00.000Z
Updated: 2024-08-05T21:06:48.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.