Lenovo Thinkserver RD350 vulnerabilities

2 CVEs affecting Lenovo Thinkserver RD350, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8106, published 2017-01-09.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8106, published 2017-01-09. Medium severity, CVSS 5.9. EPSS: 5.1% chance of exploitation in the next 30 days. A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic…
• CVE-2015-3322, published 2015-04-16. Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days. Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the…