Lucene search

K
cve[email protected]CVE-2021-3723
HistoryNov 12, 2021 - 10:15 p.m.

CVE-2021-3723

2021-11-1222:15:08
CWE-78
web.nvd.nist.gov
20
command injection
vulnerability
ibm
system x
3550 m3
3650 m3
ssh
telnet
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

47.3%

A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.

Affected configurations

NVD
Node
ibmsystem_x3550_m3_firmware
AND
ibmsystem_x3550_m3Match-
Node
ibmsystem_x3650_m3_firmware
AND
ibmsystem_x3650_m3Match-

CNA Affected

[
  {
    "product": "IBM System x 3550 M3",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "IBM System x 3650 M3",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  }
]

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

47.3%

Related for CVE-2021-3723