CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-3774

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.7%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2017-3774

Lenovo » Integrated Management Module 2 » Version: Any

cpe:2.3:a:lenovo:integrated_management_module_2:*
Lenovo » Integrated Management Module 2 » Version: 4.70

cpe:2.3:a:lenovo:integrated_management_module_2:4.70
Ibm » Bladecenter Hs22 » Version: N/A

cpe:2.3:h:ibm:bladecenter_hs22:-
Ibm » Bladecenter Hs23 » Version: N/A

cpe:2.3:h:ibm:bladecenter_hs23:-
Ibm » Bladecenter Hs23e » Version: N/A

cpe:2.3:h:ibm:bladecenter_hs23e:-
Ibm » Flex System X220 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x220_m4:-
Ibm » Flex System X222 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x222_m4:-
Ibm » Flex System X240 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x240_m4:-
Ibm » Flex System X280 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x280_m4:-
Ibm » Flex System X440 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x440_m4:-
Ibm » Flex System X480 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x480_m4:-
Ibm » Flex System X880 M4 » Version: N/A

cpe:2.3:h:ibm:flex_system_x880_m4:-
Ibm » Idataplex Dx360 M4 » Version: N/A

cpe:2.3:h:ibm:idataplex_dx360_m4:-
Ibm » Idataplex Dx360 M4 Water Cooled » Version: N/A

cpe:2.3:h:ibm:idataplex_dx360_m4_water_cooled:-
Ibm » Nextscale Nx360 M4 » Version: N/A

cpe:2.3:h:ibm:nextscale_nx360_m4:-
Ibm » System X3100 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3100_m4:-
Ibm » System X3100 M5 » Version: N/A

cpe:2.3:h:ibm:system_x3100_m5:-
Ibm » System X3250 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3250_m4:-
Ibm » System X3250 M5 » Version: N/A

cpe:2.3:h:ibm:system_x3250_m5:-
Ibm » System X3300 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3300_m4:-
Ibm » System X3500 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3500_m4:-
Ibm » System X3530 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3530_m4:-
Ibm » System X3550 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3550_m4:-
Ibm » System X3630 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3630_m4:-
Ibm » System X3650 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3650_m4:-
Ibm » System X3650 M4 Bd » Version: N/A

cpe:2.3:h:ibm:system_x3650_m4_bd:-
Ibm » System X3650 M4 Hd » Version: N/A

cpe:2.3:h:ibm:system_x3650_m4_hd:-
Ibm » System X3750 M4 » Version: N/A

cpe:2.3:h:ibm:system_x3750_m4:-
Ibm » System X3850 X6 » Version: N/A

cpe:2.3:h:ibm:system_x3850_x6:-
Ibm » System X3950 X6 » Version: N/A

cpe:2.3:h:ibm:system_x3950_x6:-
Lenovo » Flex System X240 M4 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x240_m4:-
Lenovo » Flex System X240 M5 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x240_m5:-
Lenovo » Flex System X280 X6 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x280_x6:-
Lenovo » Flex System X440 M4 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x440_m4:-
Lenovo » Flex System X480 X6 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x480_x6:-
Lenovo » Flex System X880 » Version: N/A

cpe:2.3:h:lenovo:flex_system_x880:-
Lenovo » Nextscale Nx360 M5 » Version: N/A

cpe:2.3:h:lenovo:nextscale_nx360_m5:-
Lenovo » System X3250 M6 » Version: N/A

cpe:2.3:h:lenovo:system_x3250_m6:-
Lenovo » System X3500 M5 » Version: N/A

cpe:2.3:h:lenovo:system_x3500_m5:-
Lenovo » System X3550 M5 » Version: N/A

cpe:2.3:h:lenovo:system_x3550_m5:-
Lenovo » System X3650 M5 » Version: N/A

cpe:2.3:h:lenovo:system_x3650_m5:-
Lenovo » System X3750 M4 » Version: N/A

cpe:2.3:h:lenovo:system_x3750_m4:-
Lenovo » System X3850 X6 » Version: N/A

cpe:2.3:h:lenovo:system_x3850_x6:-
Lenovo » System X3950 X6 » Version: N/A

cpe:2.3:h:lenovo:system_x3950_x6:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-3774

Products

Pricing

Contact Us