Medium severity5.9NVD Advisory· Published Nov 16, 2018· Updated Jun 17, 2026
CVE-2018-9073
CVE-2018-9073
Description
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
Affected products
3- cpe:2.3:o:lenovo:chassis_management_module_firmware:*:*:*:*:*:*:*:*Range: <2.0.0
<2.0.0+ 1 more
- (no CPE)range: <2.0.0
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-23806nvdVendor Advisory
News mentions
0No linked articles in our index yet.