Flex System X440 M4 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Flex System X440 M4 Firmware

by Lenovo · last CVE Apr 22, 2019

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 1Low 0

Severity

Exploitation

Watch

Add Flex System X440 M4 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-6157	7.5	1%	Apr 22	In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the… Affected: before 5.30
CVE-2018-9068	7.5	1%	Jul 26	The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected Affected: before 4.90
CVE-2018-9085	4.9	1%	Nov 16	Missing System x Flash Memory Write Protection Lock Bit Affected: before cge122b