CVE-2018-9084 System Management Module Vulnerabilities

2018-11-2714:00:00

lenovo

www.cve.org

0.001 Low

EPSS

Percentile

22.9%

JSON

In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.

CNA Affected

[
  {
    "product": "ThinkSystem SMM",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "1.06",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/solutions/LEN-24374

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for CVELIST:CVE-2018-9084