PT-2015-6151 · Lenovo · Thinkserver System Manager (Tsm) Baseboard Management Controller

Publicado 2015-04-16 · Atualizado 2016-12-06 · CVE-2015-3324

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ThinkServer System Manager (TSM) Baseboard Management Controller versions prior to 1.27.73476

Description The issue concerns the lack of server certificate validation during an encrypted remote KVM session, allowing man-in-the-middle attackers to spoof servers.

Recommendations For versions prior to 1.27.73476, update the firmware to version 1.27.73476 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2015-3324

Produtos afetados

Thinkserver System Manager (Tsm) Baseboard Management Controller

Referências · 3

• http://securityfocus.com/bid/74199 · Nota
• http://support.lenovo.com/us/en/product_security/tsm_weak_pw · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3324 · Nota de Segurança