CVE-2023-4856

Summary

CVE-2023-4856 is a format string vulnerability affecting SMM/SMM2 and FPC. An authenticated user can exploit this issue on a specific API endpoint, granting the ability to execute arbitrary commands. This weakness could lead to significant system compromises if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.