Integrated Management Module Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:ibm:integrated_management_module_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Integrated Management Module Firmware (14c76ad8-4536-57ef-987e-a0641e45f929) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3744 |
vulnerable | 2026-06-08 05:09:36.214733 |
Details available
In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.
Published: 2017-06-20T00:00:00.000Z
Updated: 2024-08-05T14:39:41.051Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0881 |
vulnerable | 2026-06-08 05:05:14.898638 |
Details available
The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.
Published: 2018-04-25T20:00:00.000Z
Updated: 2024-08-06T09:27:20.261Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0860 |
vulnerable | 2026-06-08 05:05:14.749137 |
Details available
The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in IBM Integrated Management Module (IMM), and the firmware before 4.15 in IBM Integrated Management Module II (IMM2) contains cleartext IPMI credentials, which allows attackers to execute arbitrary IPMI commands, and consequently establish a blade remote-control session, by leveraging access to (1) the chassis internal network or (2) the Ethernet-over-USB interface.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.254Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.