CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-9086

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.3%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2018-9086

Lenovo » Thinkserver Rd340 » Version: N/A

cpe:2.3:h:lenovo:thinkserver_rd340:-
Lenovo » Thinkserver Rd440 » Version: N/A

cpe:2.3:h:lenovo:thinkserver_rd440:-
Lenovo » Thinkserver Rd640 » Version: N/A

cpe:2.3:h:lenovo:thinkserver_rd640:-
Lenovo » Thinkserver Td340 » Version: N/A

cpe:2.3:h:lenovo:thinkserver_td340:-
Lenovo » Thinkserver Rd340 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkserver_rd340_firmware:-
Lenovo » Thinkserver Rd340 Firmware » Version: 50.00

cpe:2.3:o:lenovo:thinkserver_rd340_firmware:50.00
Lenovo » Thinkserver Rd440 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkserver_rd440_firmware:-
Lenovo » Thinkserver Rd440 Firmware » Version: 50.00

cpe:2.3:o:lenovo:thinkserver_rd440_firmware:50.00
Lenovo » Thinkserver Rd640 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkserver_rd640_firmware:-
Lenovo » Thinkserver Rd640 Firmware » Version: 50.00

cpe:2.3:o:lenovo:thinkserver_rd640_firmware:50.00
Lenovo » Thinkserver Td340 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkserver_td340_firmware:-
Lenovo » Thinkserver Td340 Firmware » Version: 46.00

cpe:2.3:o:lenovo:thinkserver_td340_firmware:46.00

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-9086

Products

Pricing

Contact Us