Vulnerabilities > Lenovo > Thinkserver Rd350 Firmware > 1.25.0

DATE CVE VULNERABILITY TITLE RISK
2018-04-23 CVE-2017-17833 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
network
low complexity
openslp debian canonical redhat lenovo CWE-119
7.5
2015-04-16 CVE-2015-3322 Cryptographic Issues vulnerability in Lenovo products
Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.
network
low complexity
lenovo CWE-310
5.0