EUVD-2016-9084

Malware in sbrugna...

EUVD-2018-20689

Malware in sbrugna...

CVE-2018-9086

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

CVE-2018-9086 Legacy Server BMC Remote Command Injection

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - us

Lenovo Security Advisory: LEN-9307 Potential Impact: Reset of TSM to defaults Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8236 Summary Description: A vulnerability was identified on certain Lenovo ThinkServer systems where the ThinkServer System Manager TSM may reset ...

CVE-2016-8236

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

CVE-2016-8236

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

Multiple Lenovo ThinkServer Products ThinkServer System Manager Baseboard Management Controller Encryption Issue Vulnerability

Lenovo ThinkServer System Manager TSM Baseboard Management Controller BMC for ThinkServer RD350, etc. is a controller from Lenovo, China, embedded in the hardware devices of ThinkServer RD350, etc. for managing and monitoring server status. Lenovo's Baseboard Management Controller BMC for...

CVE-2015-3322

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

Design/Logic Flaw

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...