Cybersecurity specialists reported the detection of multiple vulnerabilities affecting Lenovo Networking Switches. According to the report, successful exploitation of these flaws would allow malicious actors to deploy dangerous hacking activities.
Below are brief descriptions of the reported flaws, in addition to their tracking keys and scores according to the Common Vulnerability Scoring System (CVSS).
CVE-2021-27796: The excessive data output by the application would allow remote users to read the contents of any file on the filesystem only by using a few available binaries.
This is a medium severity flaw and resides in all of the following solutions:
- Lenovo ThinkSystem DB800D FC Switch: All versions
- Lenovo ThinkSystem DB720S FC Switch: All versions
- Lenovo ThinkSystem DB630S FC Switch: All versions
- Lenovo ThinkSystem DB620S FC Switch: All versions
- Lenovo ThinkSystem DB610S FC Switch: All versions
- Lenovo ThinkSystem DB400D FC Switch: All versions
- Lenovo – B6510 FC SAN Switch: All versions
- Lenovo – B6505 FC SAN Switch: All versions
- Lenovo – B300 FC SAN Switch: All versions
- Brocade – 6505 FC SAN Switch: All versions
CVE-2021-27797: On the other hand, this flaw exists due to presence of hard-coded credentials in application code, which would allow remote unauthenticated attackers to access the affected system using the hard-coded credentials.
This is a high-severity flaw and received a CVSS score of 8.5/10 and resides in the following Lenovo switches:
- Lenovo ThinkSystem DB800D FC Switch: All versions
- Lenovo ThinkSystem DB720S FC Switch: All versions
- Lenovo ThinkSystem DB630S FC Switch: All versions
- Lenovo ThinkSystem DB620S FC Switch: All versions
- Lenovo ThinkSystem DB610S FC Switch: All versions
- Lenovo ThinkSystem DB400D FC Switch: All versions
- Lenovo – B6510 FC SAN Switch: All versions
- Lenovo – B6505 FC SAN Switch: All versions
- Lenovo – B300 FC SAN Switch: All versions
- Brocade – 6505 FC SAN Switch: All versions
Even though these flaws can be exploited by remote non-authenticated attackers using specially crafted requests, there is no evidence of active exploitation attempts. Still, cybersecurity specialists recommend users of affected implementations update as soon as possible.
To learn more about information security risks, malware variants, vulnerabilities and information technologies, feel free to access the International Institute of Cyber Security (IICS) websites.
He is a well-known expert in mobile security and malware analysis. He studied Computer Science at NYU and started working as a cyber security analyst in 2003. He is actively working as an anti-malware expert. He also worked for security companies like Kaspersky Lab. His everyday job includes researching about new malware and cyber security incidents. Also he has deep level of knowledge in mobile security and mobile vulnerabilities.
