Thinkagile Hx Enclosure CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-16096

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16095

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16094

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16092

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16091

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16090

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

CVE-2018-16089

System Management Module Vulnerabilities

In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as the root user.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Lenovo

Products

System Management Module Firmware Thinkagile Hx Enclosure 7x81 Thinkagile Hx Enclosure 7y87 and 5 more

« first previous Page 2 of 2.