CVE-2015-3324
First published: Thu Apr 16 2015(Updated: )
The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 does not validate server certificates during an "encrypted remote KVM session," which allows man-in-the-middle attackers to spoof servers.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =118.71532 | ||
| Lenovo ThinkServer RD350 | ||
| Lenovo Thinkserver Rd450 | ||
| Lenovo Thinkserver Rd550 | ||
| Lenovo Thinkserver Rd650 | ||
| Lenovo Thinkserver Td350 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/description
- agent/severity
- agent/author
- agent/references
- agent/tags
- agent/event
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/lenovo
- canonical/lenovo thinkserver rd350
- canonical/lenovo thinkserver rd450
- canonical/lenovo thinkserver rd550
- canonical/lenovo thinkserver rd650
- canonical/lenovo thinkserver td350