Search
Find a vulnerability
Search criteria
1 vulnerability by lenova
VAR-201801-0504
Vulnerability from variot - Updated: 2024-11-23 22:56An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease. plural Lenovo and IBM The product is vulnerable to resource exhaustion.Service operation interruption (DoS) There is a possibility of being put into a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201801-0504",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "idataplex dx360 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3100 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3750 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x280 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3100 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "bladecenter hs23e",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x240 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "system x3850 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3500 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "system x3550 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "system x3650 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "system x3500 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "bladecenter hs22",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3300 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3650 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3250 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x222 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x240 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x480 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "system x3650 m4 bd",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x440 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x280 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x220 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3550 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3850 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "idataplex dx360 m4 water cooled",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3750 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "nextscale nx360 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3530 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3950 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "nextscale nx360 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "bladecenter hs23",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3650 m4 hd",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3950 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x880",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x240 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x880 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3250 m6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenova",
"version": "4.4"
},
{
"model": "flex system x440 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3630 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "system x3250 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "flex system x480 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "6.4"
},
{
"model": "bladecenter hs22",
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": "flex system x220 m4",
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": "nextscale nx360 m4",
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": "system x idataplex dx360 m4",
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": "system x3100 m4",
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": "flex system x240 m4",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "nextscale nx360 m5",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "system x3250 m6",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ibm:bladecenter_hs22_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ibm:flex_system_x220_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ibm:nextscale_nx360_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ibm:idataplex_dx360_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ibm:system_x3100_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x240_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:nextscale_nx360_m5_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:system_x3250_m6_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
}
]
},
"cve": "CVE-2017-3768",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-3768",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2017-3768",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-3768",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-3768",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201801-1035",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease. plural Lenovo and IBM The product is vulnerable to resource exhaustion.Service operation interruption (DoS) There is a possibility of being put into a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-3768"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-3768",
"trust": 2.4
},
{
"db": "LENOVO",
"id": "LEN-14450",
"trust": 1.6
},
{
"db": "JVNDB",
"id": "JVNDB-2018-001744",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035",
"trust": 0.6
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"id": "VAR-201801-0504",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.6817460383333334
},
"last_update_date": "2024-11-23T22:56:01.770000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "LEN-14450",
"trust": 0.8,
"url": "https://support.lenovo.com/jp/ja/product_security/len-14450"
},
{
"title": "Lenovo System x Series and IBM System x Series of security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=78131"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-400",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "https://support.lenovo.com/us/en/product_security/len-14450"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-3768"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3768"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-03-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"date": "2018-01-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"date": "2018-01-26T19:29:00.383000",
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-03-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-001744"
},
{
"date": "2018-01-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201801-1035"
},
{
"date": "2024-11-21T03:26:06.100000",
"db": "NVD",
"id": "CVE-2017-3768"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Lenovo and IBM Product depletion vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-001744"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201801-1035"
}
],
"trust": 0.6
}
}