CVE-2018-9084

System Management Module Vulnerabilities

N/A

Published: November 27, 2018 at 02:00 PM UTC

Updated: June 17, 2026 at 02:06 AM UTC

9 products affected across 1 vendorSystem Management Module FirmwareSystem Management ModuleThinkagile Hx Enclosure 7Z02

Using ThinkSystem SMM by Lenovo?

Get instant alerts when new vulnerabilities affect ThinkSystem SMM - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.7%

Description

In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

System Management Module Firmware · Lenovo

95%

v < 1.06

Affected range stops below 1.06, so it looks safe — our inference, not a vendor statement

System Management Module · Lenovo

90%

v < 1.06

Affected range stops below 1.06, so it looks safe — our inference, not a vendor statement

lenovo-thinkagile-hx-enclosure-7x81 (environment) · lenovo-thinkagile-hx-enclosure-7y87 (environment) · lenovo-thinkagile-hx-enclosure-7z02 (environment) · lenovo-thinkagile-vx-enclosure-7y11 (environment) · lenovo-thinkagile-vx-enclosure-7y91 (environment) · lenovo-thinksystem-d2-enclosure-7x20 (environment) · lenovo-thinksystem-modular-enclosure-7x22 (environment)

Thinkagile Hx Enclosure 7X81 · Lenovodevice

80%

All versions

Thinkagile Hx Enclosure 7Y87 · Lenovodevice

80%

All versions

Thinkagile Hx Enclosure 7Z02 · Lenovodevice

80%

All versions

Thinkagile Vx Enclosure 7Y11 · Lenovodevice

80%

All versions