Login Request a demo
Unscored severity · published Jan 21, 2014
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Bladecenter · Ibm
hs23; hs23e · source: NVD
FS
Flex System Manager Node 7955 · Ibm
All versions, or not specified · source: NVD
FS
Flex System Manager Node 8731 · Ibm
All versions, or not specified · source: NVD
FS
Flex System Manager Node 8734 · Ibm
All versions, or not specified · source: NVD
FS
Flex System X220 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X240 Compute Node · Ibm
All versions, or not specified · source: NVD
FS
Flex System X440 Compute Node · Ibm
All versions, or not specified · source: NVD
IM
Integrated Management Module 2 · Ibm
1.00; 2.00 · source: NVD
SX
System X Idataplex Direct Water Cooled Dx360 M4 Server · Ibm
All versions, or not specified · source: NVD
SX
System X Idataplex Dx360 M4 Server · Ibm
All versions, or not specified · source: NVD
SX
System X3100 M4 · Ibm
All versions, or not specified · source: NVD
SX
System X3250 M4 · Ibm
All versions, or not specified · source: NVD
Affected product
BL
Bladecenter
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4030
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4030
Vendor Advisory
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86068
More from Bladecenter
–
CVE-2013-4038
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3###…
–
CVE-2013-4037
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2)…
–
CVE-2013-4031
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex…
–
CVE-2009-1289
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles…
–
CVE-2009-1288
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote…