variot - var-201801-0504

var-201801-0504

Vulnerability from variot

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease. plural Lenovo and IBM The product is vulnerable to resource exhaustion.Service operation interruption (DoS) There is a possibility of being put into a state

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201801-0504",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "idataplex dx360 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3100 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3750 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x280 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3100 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "bladecenter hs23e",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x240 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "system x3850 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3500 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "system x3550 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "system x3650 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "system x3500 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "bladecenter hs22",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3300 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3650 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3250 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x222 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x240 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x480 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "system x3650 m4 bd",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x440 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x280 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x220 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3550 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3850 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "idataplex dx360 m4 water cooled",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3750 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "nextscale nx360 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3530 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3950 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "nextscale nx360 m5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "bladecenter hs23",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3650 m4 hd",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3950 x6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x880",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x240 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x880 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3250 m6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenova",
        "version": "4.4"
      },
      {
        "model": "flex system x440 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3630 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "system x3250 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "flex system x480 m4",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ibm",
        "version": "6.4"
      },
      {
        "model": "bladecenter hs22",
        "scope": null,
        "trust": 0.8,
        "vendor": "ibm",
        "version": null
      },
      {
        "model": "flex system x220 m4",
        "scope": null,
        "trust": 0.8,
        "vendor": "ibm",
        "version": null
      },
      {
        "model": "nextscale nx360 m4",
        "scope": null,
        "trust": 0.8,
        "vendor": "ibm",
        "version": null
      },
      {
        "model": "system x idataplex dx360 m4",
        "scope": null,
        "trust": 0.8,
        "vendor": "ibm",
        "version": null
      },
      {
        "model": "system x3100 m4",
        "scope": null,
        "trust": 0.8,
        "vendor": "ibm",
        "version": null
      },
      {
        "model": "flex system x240 m4",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "nextscale nx360 m5",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "system x3250 m6",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:ibm:bladecenter_hs22_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:ibm:flex_system_x220_m4_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:ibm:nextscale_nx360_m4_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:ibm:idataplex_dx360_m4_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:ibm:system_x3100_m4_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:lenovo:flex_system_x240_m4_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:lenovo:nextscale_nx360_m5_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:lenovo:system_x3250_m6_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      }
    ]
  },
  "cve": "CVE-2017-3768",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2017-3768",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2017-3768",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2017-3768",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2017-3768",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201801-1035",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease. plural Lenovo and IBM The product is vulnerable to resource exhaustion.Service operation interruption (DoS) There is a possibility of being put into a state",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      }
    ],
    "trust": 1.62
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2017-3768",
        "trust": 2.4
      },
      {
        "db": "LENOVO",
        "id": "LEN-14450",
        "trust": 1.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "id": "VAR-201801-0504",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.6817460383333334
  },
  "last_update_date": "2024-11-23T22:56:01.770000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "LEN-14450",
        "trust": 0.8,
        "url": "https://support.lenovo.com/jp/ja/product_security/len-14450"
      },
      {
        "title": "Lenovo System x Series and IBM System x Series of security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=78131"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-400",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.6,
        "url": "https://support.lenovo.com/us/en/product_security/len-14450"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-3768"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-3768"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-03-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "date": "2018-01-29T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "date": "2018-01-26T19:29:00.383000",
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-03-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      },
      {
        "date": "2018-01-29T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      },
      {
        "date": "2024-11-21T03:26:06.100000",
        "db": "NVD",
        "id": "CVE-2017-3768"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  Lenovo and  IBM Product depletion vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-001744"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201801-1035"
      }
    ],
    "trust": 0.6
  }
}

CVE-2017-3768 (GCVE-0-2017-3768)

Vulnerability from cvelistv5

Published

2018-01-26 19:00

Modified

2024-09-16 22:02

Severity ?

CWE

Denial of Service

Summary

References

▼	URL	Tags
	https://support.lenovo.com/us/en/product_security/LEN-14450	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Lenovo Group Ltd.	Integrated Management Module 2 (IMM2)	Version: Earlier than 4.4 for Lenovo System x Version: Earlier than 6.4 for IBM System x

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.107Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-14450"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Integrated Management Module 2 (IMM2)",
          "vendor": "Lenovo Group Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Earlier than 4.4 for Lenovo System x"
            },
            {
              "status": "affected",
              "version": "Earlier than 6.4 for IBM System x"
            }
          ]
        }
      ],
      "datePublic": "2018-01-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-26T18:57:02",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-14450"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "DATE_PUBLIC": "2018-01-25T00:00:00",
          "ID": "CVE-2017-3768",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Integrated Management Module 2 (IMM2)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Earlier than 4.4 for Lenovo System x"
                          },
                          {
                            "version_value": "Earlier than 6.4 for IBM System x"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo Group Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-14450",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-14450"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2017-3768",
    "datePublished": "2018-01-26T19:00:00Z",
    "dateReserved": "2016-12-16T00:00:00",
    "dateUpdated": "2024-09-16T22:02:02.189Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted