CyberSec.Space Logo
Back to CVE Browser

CVE-2014-0881

HIGH
7.4
CVSS Severity Score
EPSS Score0.1060%
EPSS Percentile21.44th
PublishedApr 25, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.

Affected Platforms (CPE)

💻
Ibm

Integrated Management Module Firmware

>= 1.00 and <= 3.56

References & Advisories

🔗 https://support.lenovo.com/us/en/solutions/ht114524
🔗 https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
🔗 https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725
🔗 https://support.lenovo.com/us/en/solutions/ht114524
🔗 https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
🔗 https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725

Related Vulnerabilities

CVE-2019-61576.5

In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) in...

CVE-2014-08605.0

The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in IBM Integrated Manageme...

CVE-2014-052410.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...

CVE-2014-844710.0

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code...