CVE-2018-9083

In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...

CVE-2018-9083

In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...

CVE-2018-9083

Consolidated details show CVE-2018-9083 affects Lenovo System Management Module (SMM) firmware prior to 1.06, where weak default root credentials could allow login to the device OS if SSH/Telnet is enabled via another vulnerability. The Lenovo advisories LEN-24374 and PS500189 summarize remediati...