Non notée
CVE-2018-16090 In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable…
Description
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinkSystem SMM 1.06 | premières → < 1.06 | 1.06 |
Autres CVE de ThinkSystem SMM
Les 9 CVE de ThinkSystem SMM →
CVE-2018-16089
In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is…
Non notée
CVE-2018-16091
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable…
Non notée
CVE-2018-16092
In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files…
Non notée
CVE-2018-16094
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings…
Non notée