Beveiligingsadvies

CVE-2018-9086

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-11-16 14:00:00
Laatst bijgewerkt 2024-08-05 07:17:51
Toegewezen door lenovo
CVSS-score geen score
Status PUBLISHED

Beschrijving

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.