// For flags

CVE-2018-16091

System Management Module Vulnerabilities

Severity Score

8.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows.

En System Management Module (SMM), en versiones anteriores a la 1.06, la lógica de creación de certificados y análisis es vulnerable a varios desbordamientos de búfer.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-08-29 CVE Reserved
  • 2018-11-27 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkagile Hx Enclosure 7x81
Search vendor "Lenovo" for product "Thinkagile Hx Enclosure 7x81"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkagile Hx Enclosure 7y87
Search vendor "Lenovo" for product "Thinkagile Hx Enclosure 7y87"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkagile Hx Enclosure 7z02
Search vendor "Lenovo" for product "Thinkagile Hx Enclosure 7z02"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkagile Vx Enclosure 7y11
Search vendor "Lenovo" for product "Thinkagile Vx Enclosure 7y11"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkagile Vx Enclosure 7y91
Search vendor "Lenovo" for product "Thinkagile Vx Enclosure 7y91"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinksystem D2 Enclosure 7x20
Search vendor "Lenovo" for product "Thinksystem D2 Enclosure 7x20"
--
Safe
Lenovo
Search vendor "Lenovo"
System Management Module Firmware
Search vendor "Lenovo" for product "System Management Module Firmware"
< 1.06
Search vendor "Lenovo" for product "System Management Module Firmware" and version " < 1.06"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinksystem Modular Enclosure 7x22
Search vendor "Lenovo" for product "Thinksystem Modular Enclosure 7x22"
--
Safe