Lenovo Thinkserver Rd340 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Thinkserver Rd340 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-17833 — CVSS 9.8 (critical): OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a…
• CVE-2018-9086 — CVSS 7.2 (high): In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a…
• CVE-2017-3753 — CVSS 6.8 (medium): A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With…