Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm integrated management module - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4838
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging uns...
Ibm Flex System Chassis Management Module -Ibm Integrated Management Module Ii -
NA
CVE-2014-0860
The firmware prior to 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware prior to 1.43 in IBM Integrated Management Module (IMM), and the firmware prior to 4.15 in IBM Integrated Management Module II (IMM2) contains cleartext IPMI credentials, which allows ma...
Ibm Integrated Management Module FirmwareIbm Integrated Management Module -Ibm Advanced Management Module FirmwareIbm Advanced Management Module -Ibm Integrated Management Module Ii FirmwareIbm Integrated Management Module Ii -
NA
CVE-2013-4037
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to...
Ibm Bladecenter Hs22Ibm Bladecenter Hs22vIbm System X Idataplex Dx360 M2 Server -Ibm System X Idataplex Dx360 M3 Server -Ibm System X Idataplex Dx360 M4 Server -Ibm System X3500 M2 -Ibm System X3500 M3 -Ibm System X3630 M3 -Ibm System X3630 M4 -Ibm Flex System X240 Compute Node -Ibm Flex System X440 Compute Node -Ibm System X3400 M2 -Ibm System X3400 M3 -Ibm System X3550 M4 -Ibm System X3620 M3 -Ibm System X3750 M4 -Ibm System X3850 X5 -Ibm System X3950 X5 -Ibm Bladecenter Hx5Ibm Flex System X220 Compute Node -Ibm System X3250 M3 -Ibm System X3250 M4 -
NA
CVE-2013-4031
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, whi...
Ibm Bladecenter Hs22Ibm Flex System X440 Compute Node -Ibm System X Idataplex Dx360 M2 Server -Ibm System X3400 M2 -Ibm System X3400 M3 -Ibm System X3500 M2 -Ibm Bladecenter Hs23eIbm Bladecenter Hx5Ibm System X3100 M4 -Ibm System X3200 M3 -Ibm System X3530 M4 -Ibm System X3550 M2 -Ibm System X3650 M4 -Ibm System X3650 M2 -Ibm Flex System X220 Compute Node -Ibm Flex System X240 Compute Node -Ibm System X3250 M3 -Ibm System X3250 M4 -Ibm System X3550 M3 -Ibm System X3550 M4 -Ibm System X3690 X5 -Ibm System X3750 M4 -
7.5
CVSSv3
CVE-2019-6157
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
Lenovo Flex System X240 M4 FirmwareLenovo Flex System X240 M5 FirmwareLenovo Flex System X280 X6 FirmwareLenovo Flex System X440 M4 FirmwareLenovo Flex System X480 X6 FirmwareLenovo Flex System X880 FirmwareLenovo Nextscale Nx360 M5 FirmwareLenovo System X3250 M6 FirmwareLenovo System X3500 M5 FirmwareLenovo System X3550 M5 FirmwareLenovo System X3650 M5 FirmwareLenovo System X3750 M4 FirmwareLenovo System X3850 X6 FirmwareLenovo System X3950 X6 FirmwareIbm Bladecenter Hs22 FirmwareIbm Bladecenter Hs23 FirmwareIbm Bladecenter Hs23e FirmwareIbm Flex System X220 M4 FirmwareIbm Flex System X222 M4 FirmwareIbm Flex System X240 M4 FirmwareIbm Flex System X280 M4 FirmwareIbm Flex System X440 M4 Firmware
NA
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 up to and including 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote malicious users to defeat cryptographic protection mechanisms via a brute-force attack against (...
Ibm Integrated Management Module 2 1.00Ibm Integrated Management Module 2 2.00Ibm Flex System Manager Node 8731 -Ibm Flex System Manager Node 8734 -Ibm System X3690 X5 -Ibm System X3650 M2 -Ibm Bladecenter Hs23eIbm System X Idataplex Dx360 M4 Server -Ibm System X3250 M4 -Ibm System X3100 M4 -Ibm Flex System Manager Node 7955 -Ibm System X3950 X5 -Ibm System X3850 X5 -Ibm System X3500 M3 -Ibm Bladecenter Hs23Ibm System X3530 M4 -Ibm System X3500 M4 -Ibm System X3300 M4 -Ibm System X3630 M4 Hd -Ibm System X3650 M3 -Ibm System X3630 M3 -Ibm System X3550 M2 -
NA
CVE-2013-4038
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent malicious users to obtain se...
Ibm Bladecenter Hs22Ibm Flex System X440 Compute Node -Ibm System X Idataplex Dx360 M2 Server -Ibm System X3400 M2 -Ibm System X3400 M3 -Ibm System X3620 M3 -Ibm System X3630 M3 -Ibm System X3850 X5 -Ibm System X3950 X5 -Ibm Flex System X220 Compute Node -Ibm Flex System X240 Compute Node -Ibm System X3250 M3 -Ibm System X3250 M4 -Ibm System X3550 M3 -Ibm System X3550 M4 -Ibm System X3690 X5 -Ibm System X3750 M4 -Ibm Bladecenter Hs23eIbm Bladecenter Hx5Ibm System X3100 M4 -Ibm System X3200 M3 -Ibm System X3500 M4 -
6.5
CVSSv3
CVE-2014-0882
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.
Ibm Integrated Management Module Firmware 3.67Ibm Integrated Management Module Firmware 3.50Ibm Integrated Management Module Firmware 3.55Ibm Integrated Management Module Firmware 3.56Ibm Integrated Management Module Firmware 3.65
8.8
CVSSv3
CVE-2021-3723
A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.
Ibm System X3550 M3 FirmwareIbm System X3650 M3 Firmware
7.4
CVSSv3
CVE-2014-0881
The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 up to and including 3.56 allows remote malicious users to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 9...
Ibm Integrated Management Module Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook