NetSight
high8.1

CVE-2018-16092

In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notabl…

Impact

In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.

Affected products

VendorProductAffected versions
LenovoSystem Management Module Firmware
before 1.06

References