Not rated

CVE-2018-9086 In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download…

Description

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.

Affected products and versions

Product	Affected versions	Fixed in
ThinkServer BMC	Versions not published

Do you use ThinkServer BMC?

Track this CVE Watch ThinkServer BMC Check my SBOMs

www.cveye.io/en/cve/CVE-2018-9086

Timeline

Published November 16, 2018
Last modified August 5, 2024

References

support.lenovo.com support.lenovo.com

Track this CVE