Auth bypass in IBM 1g L2-7 Slb Switch For Bladecenter
CVE-2017-3765
In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (17.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 17.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- IBM 1g L2-7 Slb Switch For Bladecenter
- IBM Bladecenter 1\ — versions 10g_uplink_ethernet_switch_module
- IBM Bladecenter Layer 2\/3 Copper Ethernet Switch Module
- IBM Bladecenter Virtual Fabric 10gb Switch Module
- IBM Flex System En2092 1gb Ethernet Scalable Switch
- IBM Flex System Fabric Cn4093 10gb Converged Scalable Switch
- IBM Flex System Fabric En4093\/en4093r 10gb Scalable Switch
- IBM Flex System Fabric Si4093 10gb Interconnect Module
- IBM Rackswitch G8052
- IBM Rackswitch G8124
Weakness classification (CWE)
References
- support.lenovo.com/us/en/product_security/LEN-16095 (Patch, Mitigation, Vendor Advisory)
- www.securitytracker.com/id/1040296 (Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-3765?
- CVE-2017-3765 is a high-severity vulnerability in IBM 1g L2-7 Slb Switch For Bladecenter, classified under Improper Authentication. CVSS score: 7.0/10. Published 2018-01-10.
- How severe is CVE-2017-3765?
- High severity. CVSS v3 base score is 7.0 out of 10.