High severity · published Jan 26, 2018
CVE-2017-3768
An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for…
7.5
CVSS
1.2%
EPSS
No
On KEV
Description
An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Integrated Management Module 2 (IMM2) · Lenovo Group Ltd.
Earlier than 4.4 for Lenovo System x; Earlier than 6.4 for IBM System x · source: vendor
BH
Bladecenter Hs22 Firmware · Ibm
before 6.4 · source: NVD
BH
Bladecenter Hs23 Firmware · Ibm
before 6.4 · source: NVD
BH
Bladecenter Hs23e Firmware · Ibm
before 6.4 · source: NVD
FS
Flex System X220 M4 Firmware · Ibm
before 6.4 · source: NVD
FS
Flex System X222 M4 Firmware · Ibm
before 6.4 · source: NVD
FS
Flex System X240 M4 Firmware · Lenova
before 4.4 · source: NVD
FS
Flex System X240 M5 Firmware · Lenova
before 4.4 · source: NVD
FS
Flex System X280 M4 Firmware · Ibm
before 6.4 · source: NVD
FS
Flex System X280 X6 Firmware · Lenova
before 4.4 · source: NVD
FS
Flex System X440 M4 Firmware · Ibm
before 6.4 · source: NVD
FS
Flex System X480 M4 Firmware · Ibm
before 6.4 · source: NVD
Affected product
IM
Integrated Management Module 2 (IMM2)
Lenovo Group Ltd.