What’s Vulnerable › Vulnerabilities

CVE-2018-9086: Legacy Server BMC Remote Command Injection

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-16 · updated 2026-06-17
• Weakness: CWE-78

Description

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.

Affected products

• Lenovo Thinkserver Rd340 Firmware: before 64.00 — fixed in 64.00
• Lenovo Thinkserver Rd440 Firmware: before 64.00 — fixed in 64.00
• Lenovo Thinkserver Rd640 Firmware: before 64.00 — fixed in 64.00
• Lenovo Thinkserver Td340 Firmware: before 60.00 — fixed in 60.00

How to fix

Upgrade to a fixed version: Lenovo Thinkserver Rd340 Firmware 64.00; Lenovo Thinkserver Rd440 Firmware 64.00; Lenovo Thinkserver Rd640 Firmware 64.00; Lenovo Thinkserver Td340 Firmware 60.00. Check the vendor advisory for mitigations.

References

• https://support.lenovo.com/us/en/solutions/LEN-23836
• https://support.lenovo.com/us/en/solutions/LEN-23836

Get alerted when CVE-2018-9086 or the next vulnerability affects your stack