Login Request a demo
SM
Product
System Management Module Firmware
by Lenovo · last CVE Apr 15, 2024
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 10Medium 3Low 0
Severity
All severities13Critical0High10Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add System Management Module Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9084
6.5
1%
Nov 27
In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented
Affected: before 1.06
CVE-2018-16096
6.1
1%
Nov 27
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening…
Affected: before 1.06
CVE-2018-16095
5.9
1%
Nov 27
In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails
Affected: before 1.06
Showing 3