CVE-2016-8236 - Vulnerability Details - OpenCVE

Description

Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77.

Published: 2017-03-03

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Lenovo Group Ltd.

ThinkServer RD350, RD450, RD550, RD650, TD350

affected

Version	Status	Constraints
`lower than 3.77`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:lenovo:thinkserver_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:lenovo:thinkserver_rd350:-:::::::*
	cpe:2.3:h:lenovo:thinkserver_rd450:-:::::::*
	cpe:2.3:h:lenovo:thinkserver_rd550:-:::::::*
	cpe:2.3:h:lenovo:thinkserver_rd650:-:::::::*
	cpe:2.3:h:lenovo:thinkserver_td350:-:::::::*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2016-9084	Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00195.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://support.lenovo.com/us/en/solutions/LEN-9307

History

No history.

Subscriptions

Lenovo Thinkserver Firmware Thinkserver Rd350 Thinkserver Rd450 Thinkserver Rd550 Thinkserver Rd650 Thinkserver Td350

MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2017-03-03T18:00:00.000Z

Updated: 2024-08-06T02:13:21.912Z

Reserved: 2016-09-16T00:00:00.000Z

Link: CVE-2016-8236

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2017-03-03T18:59:00.210

Modified: 2025-04-20T01:37:25.860

Link: CVE-2016-8236

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-284

{"containers": {"cna": {"affected": [{"product": "ThinkServer RD350, RD450, RD550, RD650, TD350", "vendor": "Lenovo Group Ltd.", "versions": [{"status": "affected", "version": "lower than 3.77"}]}], "datePublic": "2016-12-15T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77."}], "problemTypes": [{"descriptions": [{"description": "Reset of ThinkServer TSM to defaults", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-03-03T17:57:01.000Z", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.lenovo.com/us/en/solutions/LEN-9307"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2016-8236", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "ThinkServer RD350, RD450, RD550, RD650, TD350", "version": {"version_data": [{"version_value": "lower than 3.77"}]}}]}, "vendor_name": "Lenovo Group Ltd."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Reset of ThinkServer TSM to defaults"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/solutions/LEN-9307", "refsource": "CONFIRM", "url": "https://support.lenovo.com/us/en/solutions/LEN-9307"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:13:21.912Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.lenovo.com/us/en/solutions/LEN-9307"}]}]}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2016-8236", "datePublished": "2017-03-03T18:00:00.000Z", "dateReserved": "2016-09-16T00:00:00.000Z", "dateUpdated": "2024-08-06T02:13:21.912Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkserver_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DE1DF4A1-F602-41F8-8EBD-CFB793C72EE2", "versionEndIncluding": "3.76.208", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkserver_rd350:-:*:*:*:*:*:*:*", "matchCriteriaId": "A988370E-47F4-4DC3-91AB-025360D07160", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_rd450:-:*:*:*:*:*:*:*", "matchCriteriaId": "B994FC89-D6B6-4191-BC53-A36211DE94F8", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_rd550:-:*:*:*:*:*:*:*", "matchCriteriaId": "4BDCBFD8-D031-4034-AEF9-6F31CC1C5814", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_rd650:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2211D4D-0EB0-4E15-83D5-E94138D68284", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_td350:-:*:*:*:*:*:*:*", "matchCriteriaId": "83BDBAD4-5483-4D37-A727-D5FE876FF26E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77."}, {"lang": "es", "value": "El reestablecimiento de la configuraci\u00f3n predeterminada puede ocurrir en Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 durante una tormenta de difusi\u00f3n prolongada en versiones TSM anteriores a 3.77."}], "id": "CVE-2016-8236", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-03-03T18:59:00.210", "references": [{"source": "psirt@lenovo.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.lenovo.com/us/en/solutions/LEN-9307"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.lenovo.com/us/en/solutions/LEN-9307"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "nvd@nist.gov", "type": "Primary"}]}