CVE-2016-8236

HIGH

Lenovo ThinkServer TSM < 3.77 - Unauthenticated Reset to Default Settings via Broadcast Storm

Title source: llm
STIX 2.1

Description

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://support.lenovo.com/us/en/solutions/LEN-9307

Scores

CVSS v3 7.5
EPSS 0.0019
EPSS Percentile 41.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-284
Status published
Products (2)
lenovo/thinkserver_firmware < 3.76.208
Lenovo Group Ltd./ThinkServer RD350, RD450, RD550, RD650, TD350 lower than 3.77
Published Mar 03, 2017
Tracked Since Feb 18, 2026