CVE-2018-9083 | BDVDB-2026-109804 Detail

LenovoThinkSystem SMM

Description#

In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.lenovo.com/us/en/solutions/LEN-24374

Exploit#

No public exploit known

History#

Version 12018-11-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.