← All advisories

Medium severity5.9NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-16095

CVE-2018-16095

Description

In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.

Affected products

2

Lenovo/System Management Modulellm-fuzzy
Range: <1.06
Lenovo/ThinkSystemcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

1

support.lenovo.com/us/en/solutions/LEN-24374nvdVendor Advisory

News mentions

0

No linked articles in our index yet.