Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkagile_hx_enclosure_7z02:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkagile Hx Enclosure 7Z02 (f6ccee2b-d70b-59e1-8d3b-4f463fea0b0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9084 not_vulnerable 2026-06-08 05:12:07.764209 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9083 not_vulnerable 2026-06-08 05:12:07.761474 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T07:17:50.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16096 not_vulnerable 2026-06-08 05:11:04.150481 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16095 not_vulnerable 2026-06-08 05:11:04.149922 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16094 not_vulnerable 2026-06-08 05:11:04.149257 System Management Module Vulnerabilities
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.
Published: 2018-11-27T14:00:00.000Z
Updated: 2024-08-05T10:17:37.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16092 not_vulnerable 2026-06-08 05:11:04.143730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16091 not_vulnerable 2026-06-08 05:11:04.143075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16090 not_vulnerable 2026-06-08 05:11:04.142317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16089 not_vulnerable 2026-06-08 05:11:04.139446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.