First published: Fri Mar 03 2017(Updated: )
Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77.
Credit: psirt@lenovo.com
Affected Software | Affected Version | How to fix |
---|---|---|
Lenovo Thinkserver Firmware | <=3.76.208 | |
Lenovo ThinkServer RD350 | ||
Lenovo ThinkServer RD450 | ||
Lenovo ThinkServer RD550 | ||
Lenovo ThinkServer RD650 | ||
Lenovo ThinkServer TD350 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8236 refers to a vulnerability in Lenovo ThinkServer models that can cause a reset to default settings during a prolonged broadcast storm in TSM versions prior to 3.77.
The affected products for CVE-2016-8236 include Lenovo ThinkServer TSM version earlier than 3.77 on models RD350, RD450, RD550, RD650, and TD350.
The severity of CVE-2016-8236 is considered moderate as it can lead to unintended loss of configuration settings.
To fix CVE-2016-8236, upgrade the ThinkServer firmware to TSM version 3.77 or later.
Currently, there are no documented workarounds for CVE-2016-8236 other than updating to the latest firmware version.