Design/Logic Flaw

2018-04-2520:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.6%

JSON

The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.

CPENameOperatorVersion
integrated_management_module_firmwarege1.00
integrated_management_module_firmwarele3.56

CPE	Name	Operator	Version
	integrated_management_module_firmware	ge	1.00
	integrated_management_module_firmware	le	3.56

References

support.lenovo.com/us/en/solutions/ht114524

www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/

www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725