Lenovo ThinkServer System Manager Login Panel - Detect

Lenovo ThinkServer System Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo ThinkServer System Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

EUVD-2018-20689

Malware in sbrugna...

EUVD-2016-9084

Malware in sbrugna...

CVE-2018-9086

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

CVE-2018-9086 Legacy Server BMC Remote Command Injection

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

CVE-2018-9086: Improper Neutralization of Special Elements used in an OS Command

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

PT-2018-18847

Name of the Vulnerable Software and Affected Versions Lenovo ThinkServer affected versions not specified Description A command injection issue exists in the BMC firmware download command of some Lenovo ThinkServer-branded servers. This allows a privileged user to download and execute arbitrary co...

Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - us

Lenovo Security Advisory: LEN-9307 Potential Impact: Reset of TSM to defaults Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8236 Summary Description: A vulnerability was identified on certain Lenovo ThinkServer systems where the ThinkServer System Manager TSM may reset ...

CVE-2016-8236

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

CVE-2016-8236

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

CVE-2016-8236: Improper Access Control

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...

PT-2017-9551

Name of the Vulnerable Software and Affected Versions Lenovo ThinkServer TSM versions prior to 3.77 Description A prolonged broadcast storm may cause a reset to default settings in Lenovo ThinkServer TSM. Recommendations For versions prior to 3.77, update to version 3.77 or later to resolve the...

Multiple Lenovo ThinkServer Products ThinkServer System Manager Baseboard Management Controller Encryption Issue Vulnerability

Lenovo ThinkServer System Manager TSM Baseboard Management Controller BMC for ThinkServer RD350, etc. is a controller from Lenovo, China, embedded in the hardware devices of ThinkServer RD350, etc. for managing and monitoring server status. Lenovo's Baseboard Management Controller BMC for...

CVE-2015-3322

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

Design/Logic Flaw

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

CVE-2015-3322: Undefined Security Weakness

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

PT-2015-6149

Name of the Vulnerable Software and Affected Versions Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers versions prior to 1.26.0 Description The issue concerns the use of weak encryption to store user and administrator BIOS passwords. This weakness allows attackers to decrypt the...