VYPR

System x servers

by Lenovo

CVEs (2)

  • CVE-2020-8332MedOct 14, 2020
    risk 0.42cvss 6.4epss 0.00

    A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.

  • CVE-2018-9085MedNov 16, 2018
    risk 0.32cvss 4.9epss 0.01

    A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash…