CVE-2016-8236

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses

Lenovo Security Advisory: LEN-2015-024 Potential Impact: Unauthorized Access; Escalation of Privilege; Denial of Service; Man-in-the-Middle MitM Attack Severity: High Summary: Multiple security weaknesses were discovered in the ThinkServer System Manager TSM Baseboard Management Controller for th...

Multiple vulnerabilities in multiple Lenovo ThinkServer product servers

Lenovo ThinkServer RD350, RD450, RD550, RD650 and TD350 are rackmount server products from Lenovo, China. A weak encryption storage user and administrator BIOS password vulnerability exists in multiple Lenovo ThinkServer product servers. An attacker could exploit this vulnerability to crack the...

Design/Logic Flaw

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

CVE-2015-3323

CVE-2015-3323 affects Lenovo ThinkServer System Manager (TSM) BMC in RD350, RD450, RD550, RD650 and TD350. The vulnerability is triggered by a malformed HTTP request during authentication, causing a denial of service by crashing the web interface. A fix is available in TSM firmware 1.27.73476 (an...

CVE-2015-3322

Lenovo ThinkServer RD350/RD450/RD550/RD650/TD350—before BIOS firmware 1.26.0, BIOS passwords (user and admin) are stored with a legacy, weak encryption. This could allow an attacker to decrypt passwords via unspecified vectors. Affected models require upgrading to BIOS firmware version 1.26.0 (or...