System Management Module Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:lenovo:system_management_module_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | System Management Module Firmware (1b4958ae-c9b1-5315-ac61-dc5004d80be1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-9084 |
vulnerable | 2026-06-08 05:12:07.764141 |
System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9083 |
vulnerable | 2026-06-08 05:12:07.759312 |
System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.616Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16096 |
vulnerable | 2026-06-08 05:11:04.150421 |
System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.631Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16095 |
vulnerable | 2026-06-08 05:11:04.149768 |
System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.616Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16094 |
vulnerable | 2026-06-08 05:11:04.148906 |
System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.767Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16092 |
vulnerable | 2026-06-08 05:11:04.143674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16091 |
vulnerable | 2026-06-08 05:11:04.143018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16090 |
vulnerable | 2026-06-08 05:11:04.142159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16089 |
vulnerable | 2026-06-08 05:11:04.137759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.