CVE-2016-8230

—

CVSS 3.0

7.5 high

EPSS

1%p63

Published

Jun 4, 2017 (Jun 4, 2017)

Modified

Jun 17, 2026

Description

In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.

Vendors: lenovo
Products: lenovo service bridge
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.