High severity · published Jan 10, 2018
CVE-2017-3765
In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a…
7.0
CVSS
0.3%
EPSS
No
On KEV
Description
In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EN
Enterprise Network Operating System affecting Lenovo and IBM RackSwitch and BladeCenter Products · Lenovo Group Ltd.
Earlier than · source: vendor
EN
Enterprise Network Operating System · Lenovo
before 8.4.6.0; before 8.4.6.0 · source: NVD
Affected product
EN
Enterprise Network Operating System affecting Lenovo and IBM RackSwitch and BladeCenter Products
Lenovo Group Ltd.
