Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinksystem_modular_enclosure_7x22:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinksystem Modular Enclosure 7X22 (669b8404-6b9a-53fd-b842-b0ccd0259865)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9084 not_vulnerable 2026-06-08 05:12:07.764378 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9083 not_vulnerable 2026-06-08 05:12:07.763681 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16096 not_vulnerable 2026-06-08 05:11:04.150738 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16095 not_vulnerable 2026-06-08 05:11:04.150071 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16094 not_vulnerable 2026-06-08 05:11:04.149410 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16092 not_vulnerable 2026-06-08 05:11:04.143793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16091 not_vulnerable 2026-06-08 05:11:04.143142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16090 not_vulnerable 2026-06-08 05:11:04.142651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16089 not_vulnerable 2026-06-08 05:11:04.141707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.