Chassis Management Module Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-16	CVE-2018-9073	Use of Hard-coded Credentials vulnerability in Lenovo Chassis Management Module Firmware Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. network high complexity lenovo CWE-798	5.9
2018-11-16	CVE-2018-9071	Information Exposure vulnerability in Lenovo Chassis Management Module Firmware Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. network low complexity lenovo CWE-200	5.3