Security Bulletin: TPM on the Integrated Management Module II (IMM2) of Flex System x222 compute node is not configured correctly (CVE-2014-0881)

Summary The IMM2 TPM on the Flex System x222 compute node is not configured correctly which can be exploited to steal keys or to perform 'denial of service' type attacks. Vulnerability Details Abstract The IMM2 TPM on the Flex System x222 compute node is not configured correctly which can be...

CVE-2014-0881

The CVE-2014-0881 vulnerability affects IBM Flex System x222 compute node IMM2 TPM (firmware 1.00–3.56). The issue arises from an incorrectly configured TPM, potentially allowing an attacker to exfiltrate TPM data or cause a denial-of-service. IBM/IBM X-Force notes exploitability; IBM bulletin re...