Not rated
CVE-2018-16092 In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files…
Description
In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkSystem SMM 1.06 | earliest → < 1.06 | 1.06 |
Other CVEs of ThinkSystem SMM
The 9 CVEs of ThinkSystem SMM →
CVE-2018-16089
In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is…
Not rated
CVE-2018-16090
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable…
Not rated
CVE-2018-16091
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable…
Not rated
CVE-2018-16094
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings…
Not rated