CVE-2018-9083
System Management Module Vulnerabilities
- State
- Published
- Severity
- Not scored
- Published
- Nov 27, 2018
- Updated
- Aug 5, 2024
- Reserved
- Mar 27, 2018
Description
In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
ThinkSystem SMMLenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.