CVE-2023-2993

Name of the Vulnerable Software and Affected Versions SMM versions 1 and 2 FPC (affected versions not specified)

Description A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands that the user does not normally have sufficient privileges to execute.

Recommendations For SMM versions 1 and 2, consider restricting access to the web management server API to minimize the risk of exploitation. For FPC, at the moment, there is no information about a newer version that contains a fix for this vulnerability.