Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:switch_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductSwitch Center (19786b1f-435a-5e98-bfa0-2862549e037e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7820 vulnerable 2026-06-08 05:07:02.001462 Details available
Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.
Published: 2015-11-12T02:00:00.000Z
Updated: 2024-08-06T07:59:00.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7819 vulnerable 2026-06-08 05:07:02.001140 Details available
The DB service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain sensitive administrator-account information via a request on port 40999, as demonstrated by an improperly encrypted password.
Published: 2015-11-12T02:00:00.000Z
Updated: 2024-08-06T07:58:59.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7818 vulnerable 2026-06-08 05:07:02.000821 Details available
The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.
Published: 2015-11-12T02:00:00.000Z
Updated: 2024-08-06T07:59:00.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7817 vulnerable 2026-06-08 05:07:02.000400 Details available
Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files, via a request to port 40080 or 40443.
Published: 2015-11-12T02:00:00.000Z
Updated: 2024-08-06T07:58:59.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.