CVE-2018-9086 — Legacy Server BMC Remote Command Injection
In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute …
Published: 2018-11-16 · CVSS: Unscored
In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7