A bug in Lenovo s Enterprise Networking Operating System could allow an attacker to launch an authentication bypass attack. Affected are 16 model IBM switches and 16 Lenovo switches, all listed in the advisory. Lenovo said the bypass function was intentionally added in 2004 by Nortel Networks and its blade server and switch business unit. Lenovo has removed the bypass mechanism from the ENOS source code and has released updated firmware for affected products. There are no public exploits of the bug and its Cloud Network Operating System firmware is not impacted by the flaw.
Source: https://threatpost.com/lenovo-patches-networking-os-vulnerability-dating-back-to-2004/129441/