CVE-2018-16090
System Management Module Vulnerabilities
published November 27, 2018
What it is
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00874 · 58.5th percentile
- Published
- 2018-11-27T14:00Z
EPSS history
Timeline