In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Lenovo
Integrated Management Module Firmware
NVD
CVSS 3.0
6.5
EPSS
0.3%
The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Google
Information Disclosure
One Key
NVD
CVSS 3.0
5.3
EPSS
0.2%