CVE-2018-9073: vulnerability in Lenovo Chassis Management Module (CMM)
CMM Security Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
Affected products
Lenovo · Chassis Management Module (CMM)Related CVEs — Lenovo Chassis Management Module (CMM)
In the same product, most dangerous first.