Skip to content

Known vulnerabilities in Lenovo ThinkSystem SMM

Is your version affected?

CVE Summary Score Published
CVE-2018-9084 In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the… Not rated Nov 27, 2018
CVE-2018-9083 In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could… Not rated Nov 27, 2018
CVE-2018-16096 In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to… Not rated Nov 27, 2018
CVE-2018-16095 In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user… Not rated Nov 27, 2018
CVE-2018-16094 In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings… Not rated Nov 27, 2018
CVE-2018-16092 In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files… Not rated Nov 27, 2018
CVE-2018-16091 In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable… Not rated Nov 27, 2018
CVE-2018-16090 In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable… Not rated Nov 27, 2018
CVE-2018-16089 In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is… Not rated Nov 27, 2018

Other Lenovo products