Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in libxml/libxml2

Summary IBM Integrated Management Module II IMM2 has addressed the following vulnerabilities in libxml/libxml2. Vulnerability Details CVEID: CVE-2017-5130 DESCRIPTION: Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by libxml2. By persuading a victi...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in bind (CVE-2017-3145)

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerability in bind. Vulnerability Details CVEID: CVE-2017-3145 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a use-after-free when improperly sequencing cleanup operations on upstream...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilties in dhcp (CVE-2018-5732, CVE-2018-5733)

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities in dhcp. Vulnerability Details CVEID: CVE-2018-5733 DESCRIPTION: ISC DHCP is vulnerable to a denial of service. By sending an overly large amount of packets, a remote attacker could overflow a...

Security Bulletin: Vulnerabilities in ntp affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilities in ntp. Vulnerability Details CVEID: CVE-2018-7185 DESCRIPTION: NTP is vulnerable to a denial of service. By sending specially crafted packets, a remote...

CVE-2023-49242

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49239

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49246

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49246

Technical details about CVE-2023-49246 are not publicly provided in the supplied documents. No affected products, versions, root cause, or fixes are specified here. Monitor for new advisories or updates from vendors and CERTs.

CVE-2023-49242

CVE-2023-49242 affects Huawei HarmonyOS in the running management module, described as a “free broadcast vulnerability.” The vulnerability may compromise service confidentiality if exploited. The NVD entry lists CVSS v3.1 base score 7.5 (Network) with Low attack complexity and no user interaction...

PT-2023-31125

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendation...

PT-2023-31129 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A free broadcast vulnerability exists in the running management module. This issue may impact service confidentiality if successfully exploited. Recommendations: At the moment, ther...

CVE-2023-49246: Incorrect Authorization

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49239: Incorrect Authorization

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241: Undefined Security Weakness

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2023-31133 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49242: Undefined Security Weakness

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an override vulnerability in the card management module. Successful exploitation of thi...