CVE-2018-16094

CWE-119Buffer Overflow3 documents3 sources
Severity
8.1HIGH
EPSS
0.5%
top 32.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 27
Latest updateMay 14

Description

In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages2 packages

CVEListV5lenovo/thinksystem_smmunspecified1.06

🔴Vulnerability Details

2
GHSA
GHSA-q257-x9vp-7xjg: In System Management Module (SMM) versions prior to 12022-05-14
CVEList
System Management Module Vulnerabilities2018-11-27