CVEvulnerability
CVE-2014-0881
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.4 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-284
Description
The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.
Affected configurations
• ibm integrated management module firmware (>= 1.00 <= 3.56)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.lenovo.com/us/en/solutions/ht114524 Third Party Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/ Vendor Advisory
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725 Vendor Advisory
- https://support.lenovo.com/us/en/solutions/ht114524 Third Party Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/ Vendor Advisory
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725 Vendor Advisory