CVE-2018-9086 Legacy Server BMC Remote Command Injection
Privileged users can inject commands into the BMC firmware download process to execute arbitrary code on Lenovo ThinkServer servers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-9086?
CVE-2018-9086 is a high-severity command injection vulnerability in Lenovo ThinkServer BMC, published on 16 Nov 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.
Weakness: CWE-78
Which versions are affected by CVE-2018-9086?
It affects 4 products.
Products include Lenovo Thinkserver Rd340 Firmware, Lenovo Thinkserver Rd440 Firmware, Lenovo Thinkserver Rd640 Firmware, Lenovo Thinkserver Td340 Firmware.
How do I fix CVE-2018-9086?
No fix has been published for CVE-2018-9086 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-9086 being exploited?
There is no known exploitation of CVE-2018-9086 in the wild and no public exploit code.
Sources
Also known as GHSA-5hq6-2wp2-ffxx.