6.5
CVSSv3

CVE-2018-9084

Published: 27/11/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

In System Management Module (SMM) versions before 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

lenovo system_management_module_firmware