CVE-2015-3322: Weak Encryption
First published: Thu Apr 16 2015(Updated: )
Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Thinkserver Rd650 Firmware | <=1.25.0 | |
| Lenovo Thinkserver Rd650 | ||
| Lenovo Thinkserver Td350 Firmware | <=1.25.0 | |
| Lenovo Thinkserver Td350 | ||
| Lenovo Thinkserver Rd350 Firmware | <=1.25.0 | |
| Lenovo ThinkServer RD350 | ||
| Lenovo Thinkserver Rd550 Firmware | <=1.25.0 | |
| Lenovo Thinkserver Rd550 | ||
| Lenovo Thinkserver Rd450 Firmware | <=1.25.0 | |
| Lenovo Thinkserver Rd450 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/tags
- agent/event
- agent/type
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/lenovo
- canonical/lenovo thinkserver rd650 firmware
- version/lenovo thinkserver rd650 firmware/1.25.0
- canonical/lenovo thinkserver rd650
- canonical/lenovo thinkserver td350 firmware
- version/lenovo thinkserver td350 firmware/1.25.0
- canonical/lenovo thinkserver td350
- canonical/lenovo thinkserver rd350 firmware
- version/lenovo thinkserver rd350 firmware/1.25.0
- canonical/lenovo thinkserver rd350
- canonical/lenovo thinkserver rd550 firmware
- version/lenovo thinkserver rd550 firmware/1.25.0
- canonical/lenovo thinkserver rd550
- canonical/lenovo thinkserver rd450 firmware
- version/lenovo thinkserver rd450 firmware/1.25.0
- canonical/lenovo thinkserver rd450