Lenovo Integrated Management Module 2 vulnerabilities

2 CVEs affecting Lenovo Integrated Management Module 2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8340, published 2020-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3774, published 2018-04-19. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than…
CVE-2020-8340, published 2020-09-15. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Management Controller…