Thinkserver Rd450 Firmware

CVEs (4)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-17833	Openslp Openslp	Cri	0.64	9.8	0.04	Apr 23, 2018	OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVE-2022-40137	Lenovo WMI SMI Handler	Med	0.44	6.7	0.00	Jan 30, 2023	A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-40134	Lenovo BIOS Password SMI Handler	Med	0.29	4.4	0.00	Jan 30, 2023	An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVE-2015-3322	Lenovo Thinkserver Rd350		0.00	—	0.01	Apr 16, 2015	Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.

CVE-2017-17833CriApr 23, 2018
Openslp
Openslp
risk 0.64cvss 9.8epss 0.04
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVE-2022-40137MedJan 30, 2023
Lenovo
WMI SMI Handler
risk 0.44cvss 6.7epss 0.00
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-40134MedJan 30, 2023
Lenovo
BIOS Password SMI Handler
risk 0.29cvss 4.4epss 0.00
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVE-2015-3322Apr 16, 2015
Lenovo
Thinkserver Rd350
risk 0.00cvss —epss 0.01
Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.