CVE-2018-9073
CMM Security Vulnerability
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Nov 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
Affected products
Lenovo · Chassis Management Module (CMM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →