CVE-2015-7820: IBM System Networking Switch Center

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.

Affected products

• IBM System Networking Switch Center: up to and including 7.3.1.4
• Lenovo Switch Center: up to and including 8.1.1.0

Published 2015-11-12. Last modified 2026-06-17.