CVE-2017-3765: High severity lenovo enterprise network operating system vulnerability
In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3765?
CVE-2017-3765 is classified as a high severity vulnerability due to its potential for authentication bypass.
How do I fix CVE-2017-3765?
To mitigate CVE-2017-3765, apply the latest firmware updates provided by Lenovo for affected devices.
Which products are affected by CVE-2017-3765?
CVE-2017-3765 affects Lenovo and IBM RackSwitch and BladeCenter products running certain versions of the Enterprise Networking Operating System.
What is the nature of the vulnerability in CVE-2017-3765?
CVE-2017-3765 involves an authentication bypass vulnerability that can be exploited through various interfaces like Telnet and SSH.
Can CVE-2017-3765 be exploited remotely?
Yes, CVE-2017-3765 can potentially be exploited remotely due to its accessibility through network interfaces.