CVE:CVE-2018-9086
CNNVD:CNNVD-201811-524
Lenovo ThinkServer RD340等都是中国联想（Lenovo）公司的服务器设备。
多款Lenovo产品中的BMC固件下载命令存在安全漏洞。攻击者可利用该漏洞下载并执行任意代码。以下产品受到影响：Lenovo ThinkServer RD340；ThinkServer RD440；ThinkServer RD640；ThinkServer TD340。
solution:Upgrade lenovo thinkserver_rd340_firmware to a higher version than 64.00,and avoid the version (,64.00); Upgrade lenovo thinkserver_rd440_firmware to a higher version than 64.00,and avoid the version (,64.00); Upgrade lenovo thinkserver_rd640_firmware to a higher version than 64.00,and avoid the version (,64.00); Upgrade lenovo thinkserver_td340_firmware to a higher version than 60.00,and avoid the version (,60.00)