CVE Daily

CVE-2018-16092

In System Management Module (SMM) versions prior to 1.06, the FFDC feature inclu...

High CVSS 8.1

Overview

In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.

CWE: N/A Published: 2018-11-27T14:29:00.493
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.1 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags