EUVD-2019-15728

Malware in sbrugna...

PT-2024-3581 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified SMM/SMM2 and FPC affected versions not specified Description: A command injection issue was identified in the System Management Module SMM/SMM2 and...

PT-2024-3582 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified Description: The issue is related to an authentication bypass vulnerability in the System Management Module SMM/SMM2 and Fan Power Controller FPC...

PT-2022-3667 · Lenovo · Lenovo Thinksystem +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem versions affected versions not specified Lenovo ThinkStation versions affected versions not specified Lenovo ThinkEdge versions affected versions not specified Lenovo ThinkAgile versions affected versions not specified...

PT-2022-3668 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkStation, ThinkEdge, and ThinkAgile affected versions not specified Description: A buffer overflow issue exists in the Remote Presence subsystem, potentially allowing authenticated users to cause a recoverable subsyste...

CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

Spoofing

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

CVE-2019-6161

CVE-2019-6161 affects Lenovo/ThinkAgile CP-SB Storage Block BMC. A session-handling vulnerability allows reused session IDs, potentially enabling unauthorized access on firmware versions prior to 1908.M. Affected product: ThinkAgile CP-SB BMC; other BMCs (ThinkSystem XCC, System x IMM2, etc.) are...

CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - US

Lenovo Security Advisory: LEN-26957 Potential Impact: Unauthorized access Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6161 Summary Description: An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB...

ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - Lenovo Support US

No description provided...