Vulnerability Details CVE-2014-0881
The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.1%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 5.8
References
- https://support.lenovo.com/us/en/solutions/ht114524
- https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725
- https://support.lenovo.com/us/en/solutions/ht114524
- https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725
Products affected by CVE-2014-0881
-
cpe:2.3:h:ibm:flex_system_x222:-
-
cpe:2.3:o:ibm:integrated_management_module_firmware:1.00
-
cpe:2.3:o:ibm:integrated_management_module_firmware:1.36
-
cpe:2.3:o:ibm:integrated_management_module_firmware:1.43
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.00
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.50
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.55
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.56