Lenovo Thinkserver System Manager Baseboard Management Controller Firmware vulnerabilities

2 CVEs affecting Lenovo Thinkserver System Manager Baseboard Management Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3324, published 2015-04-16.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-3323, published 2015-04-16. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 allows remote attackers to cause a denial of…
• CVE-2015-3324, published 2015-04-16. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 does not validate server certificates during an…