CVE-2017-3765

State
Published
Severity
Not scored
Published
Jan 10, 2018
Updated
Sep 17, 2024
Reserved
Dec 16, 2016

Read the record on cve.org

Description

In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Enterprise Network Operating System affecting Lenovo and IBM RackSwitch and BladeCenter ProductsLenovo Group Ltd.
  • Earlier thanAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.