Lenovo Nextscale N1200 Enclosure Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Nextscale N1200 Enclosure Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-3849 — CVSS 9.8 (critical): An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System…
• CVE-2021-3897 — CVSS 9.8 (critical): An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System…
• CVE-2023-2992 — CVSS 7.5 (high): An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under…
• CVE-2024-2659 — CVSS 7.2 (high): A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to…
• CVE-2023-2993 — CVSS 5.4 (medium): A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a…