Security Bulletin: Vulnerability in IPSec-Tools affects IBM Integrated Management Module II (IMM2)

Summary IBM Integrated Management Module II IMM2 has addressed the following vulnerability in IPSec-Tools. Vulnerability Details CVEID: CVE-2016-10396 DESCRIPTION: IPsec-Tools is vulnerable to a denial of service, caused by a flaw in the racoon daemon. By repeatedly sending ISAKMP fragment packet...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in libxml/libxml2

Summary IBM Integrated Management Module II IMM2 has addressed the following vulnerabilities in libxml/libxml2. Vulnerability Details CVEID: CVE-2017-5130 DESCRIPTION: Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by libxml2. By persuading a victi...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in freetype2 (CVE-2017-8287 CVE-2017-8105 CVE-2016-10244)

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities in freetype2. Vulnerability Details CVEID: CVE-2017-8287 DESCRIPTION: Freetype2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the t1builderclosecontour function in...

Security Bulletin: Vulnerabilities in ntp affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilities in ntp. Vulnerability Details CVEID: CVE-2018-7185 DESCRIPTION: NTP is vulnerable to a denial of service. By sending specially crafted packets, a remote...

CVE-2023-49242

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49239

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49246

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49246

Technical details about CVE-2023-49246 are not publicly provided in the supplied documents. No affected products, versions, root cause, or fixes are specified here. Monitor for new advisories or updates from vendors and CERTs.

CVE-2023-49242

CVE-2023-49242 affects Huawei HarmonyOS in the running management module, described as a “free broadcast vulnerability.” The vulnerability may compromise service confidentiality if exploited. The NVD entry lists CVSS v3.1 base score 7.5 (Network) with Low attack complexity and no user interaction...

PT-2023-31125

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendation...

PT-2023-31129 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A free broadcast vulnerability exists in the running management module. This issue may impact service confidentiality if successfully exploited. Recommendations: At the moment, ther...

PT-2023-31133 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49246: Incorrect Authorization

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49239: Incorrect Authorization

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241: Undefined Security Weakness

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49242: Undefined Security Weakness

Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an override vulnerability in the card management module. Successful exploitation of thi...