CVE-2017-3774

CRÍTICO 9.8CVE-2017-3774 · Published 19/04/2018 · updated 17/06/2026

Em resumo

CVE-2017-3774 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta integrated management module 2 (lenovo).
Chance de exploração nos próximos 30 dias (EPSS): 1.3%, maior que 69.8% das vulnerabilidades.
Correção: atualize para 4.70, 6.60 ou posterior.

Package	Affected versions	Patched versions
integrated management module 2 lenovo	`< 4.70< 6.60`	`4.706.60`

Description

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption.

References

support.lenovo.com/us/en/product_security/LEN-19586 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free