5

CVE-2015-3323

The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 allows remote attackers to cause a denial of service (web interface crash) via a malformed HTTP request during authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkserver System Manager Baseboard Management Controller Firmware Version <= 118.71532.
   Lenovo ≫ Thinkserver Rd350 Version -
   Lenovo ≫ Thinkserver Rd450 Version -
   Lenovo ≫ Thinkserver Rd550 Version -
   Lenovo ≫ Thinkserver Rd650 Version -
   Lenovo ≫ Thinkserver Td350 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.33% 0.68
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://support.lenovo.com/us/en/product_security/tsm_weak_pw
Vendor Advisory
http://www.securityfocus.com/bid/74197