Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-16090

System Management Module Vulnerabilities

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo ThinkSystem SMM

  • unspecified to < 1.06affected

References