CVE-2015-7820

no score yetEPSS 1.4%

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2015-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:system_networking_switch_center
lenovo:switch_center

References

http://www.zerodayinitiative.com/advisories/ZDI-15-554/
https://support.lenovo.com/us/en/product_security/len_2015_074
http://www.zerodayinitiative.com/advisories/ZDI-15-554/
https://support.lenovo.com/us/en/product_security/len_2015_074

Check your stack JSON