CVE-2014-0860

The CVE-2014-0860 issue affects IBM BladeCenter components: AMM firmware before 3.66E, IMM firmware before 1.43, and IMM2 firmware before 4.15. The root cause is that administrative IPMI credentials are stored in plaintext within the firmware binaries, allowing an attacker with access to the chas...

CVE-2014-0882

CVE-2014-0882 affects IBM IMM2 (Integrated Management Module II) across Flex System x220/x222/x240/x440, NeXtScale nx360 M4, System x3100/M4, x3250/M4, x3500/M4, x3530/M4, x3550/M4, x3630/M4, x3650/M4, x3750/M4, and x iDataPlex dx360 M4, where certain configurations may cause generated Service Ad...

CVE-2017-3744

CVE-2017-3744 affects Lenovo System x IMM2 firmware. Remote commands issued by LXCA/other utilities may be logged in the FFDC service log, potentially exposing clear-text login information to authorized users who can capture/export FFDC data. Impact is confined to Lenovo System x IMM2, with the v...

CVE-2014-0881

The CVE-2014-0881 vulnerability affects IBM Flex System x222 compute node IMM2 TPM (firmware 1.00–3.56). The issue arises from an incorrectly configured TPM, potentially allowing an attacker to exfiltrate TPM data or cause a denial-of-service. IBM/IBM X-Force notes exploitability; IBM bulletin re...