The DB service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain sensitive administrator-account information via a request on port 40999, as demonstrated by an improperly encrypted password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Switch_center | Lenovo | * | 8.1.1.0 (including) |