Design/Logic Flaw

2015-04-1623:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.6%

JSON

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.

CPENameOperatorVersion
thinkserver_rd350_firmwarele1.25.0
thinkserver_rd450_firmwarele1.25.0
thinkserver_rd550_firmwarele1.25.0
thinkserver_rd650_firmwarele1.25.0
thinkserver_td350_firmwarele1.25.0

Name	Operator	Version
thinkserver_rd350_firmware	le	1.25.0
thinkserver_rd450_firmware	le	1.25.0
thinkserver_rd550_firmware	le	1.25.0
thinkserver_rd650_firmware	le	1.25.0
thinkserver_td350_firmware	le	1.25.0