Read the docs

Lenova

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Lenova records in CISA KEV

No Lenova vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flex System X240 M4 Firmware 1 record LOW Flex System X240 M5 Firmware 1 record LOW Flex System X280 X6 Firmware 1 record LOW Flex System X440 M4 Firmware 1 record LOW Flex System X480 X6 Firmware 1 record LOW Flex System X880 Firmware 1 record LOW Nextscale Nx360 M5 Firmware 1 record LOW System X3250 M6 Firmware 1 record LOW

Records

1 record in Flex System X480 X6 Firmware · all components

TI-2017-02881 CVE-2017-3768 · GHSA-7pqr-j23w-p43m

Uncontrolled resource consumption in Lenovo Integrated Management Module 2

Priority LOW 35

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01212 Published 2018-01-26 No fix listed CWE-400
Open these records in search →