CVEvulnerability

CVE-2018-9084

6.5 MEDIUM Published 2018-11-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N

Description

In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.

Affected configurations

• lenovo system management module firmware (< 1.06)

References