Authentication flaw

2018-11-2714:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.

CPENameOperatorVersion
system_management_module_firmwarelt1.06

CPE	Name	Operator	Version
	system_management_module_firmware	lt	1.06

References

support.lenovo.com/us/en/solutions/LEN-24374