CVE-2017-3768

State: Published
Severity: Not scored
Published: Jan 26, 2018
Updated: Sep 16, 2024
Reserved: Dec 16, 2016

Description

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Integrated Management Module 2 (IMM2)Lenovo Group Ltd.	Earlier than 4.4 for Lenovo System xAffected Earlier than 6.4 for IBM System xAffected

References

https://support.lenovo.com/us/en/product_security/LEN-14450

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.