[rwth-security] CVE-2018-9083 - Lenovo System Management Module (SMM)

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] bzw. [1] FYI

"In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability."

VG

Bernd

[0] https://cve.circl.lu/cve/CVE-2018-9083

[1] https://cve.circl.lu/cve/CVE-2018-9083