← Vulnerability feed

Vulnerability record · CVE-2015-3322 · published 16 April 2015

CVE-2015-3322: Lenovo thinkserver rd650 firmware vulnerability

Lenovo · Thinkserver Rd650 Firmware

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.

5.0 CVSS 2.0 Medium EPSS 0.72% · top 47.6% CWE-310 · CWE-310
5.0CVSS 2.0 base score
0.72%EPSS exploitation probability, 30 days
NoNot in CISA KEV
10Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

10 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/74198 Third Party AdvisoryVDB Entry
https://support.lenovo.com/us/en/product_security/ts_bios_pw PatchVendor Advisory
http://www.securityfocus.com/bid/74198 Third Party AdvisoryVDB Entry
https://support.lenovo.com/us/en/product_security/ts_bios_pw PatchVendor Advisory

Track CVE-2015-3322 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17833Openslp memory buffer overflow vulnerabilityOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or …EPSS 3.8%5.9CVE-2016-8106Intel ethernet controller x710 firmware improper input validation vulnerabilityA Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop th…EPSS 5.1%

Source: NIST National Vulnerability Database (record CVE-2015-3322), CISA KEV, FIRST EPSS (scores of 2026-10-12). This page is refreshed as NVD updates the record.