Lucene search

PRIOn knowledge basePRION:CVE-2015-3324

HistoryApr 16, 2015 - 11:59 p.m.

Code injection

2015-04-1623:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

17.9%

JSON

The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 does not validate server certificates during an “encrypted remote KVM session,” which allows man-in-the-middle attackers to spoof servers.

CPENameOperatorVersion
thinkserver_system_manager_baseboard_management_controller_firmwareeq118.71532

CPE	Name	Operator	Version
	thinkserver_system_manager_baseboard_management_controller_firmware	eq	118.71532

References

support.lenovo.com/us/en/product_security/tsm_weak_pw

www.securityfocus.com/bid/74199

7.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

17.9%

JSON

Related for PRION:CVE-2015-3324