IBM Integrated Management Module Firmware vulnerabilities

4 CVEs affecting IBM Integrated Management Module Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0882, published 2018-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0881, published 2018-04-25. High severity, CVSS 7.4. EPSS: 2% chance of exploitation in the next 30 days. The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of…
CVE-2014-0882, published 2018-04-25. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via…
CVE-2014-0860, published 2014-07-07. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in IBM Integrated Management Module (IMM), and the firmware before 4.15 in IBM Integrated…
CVE-2017-3744, published 2017-06-20. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated…