CVE-2017-3744
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-3744
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lenovo System x IMM2固件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lenovo System x是中国联想（Lenovo）公司的一款服务器。IMM2是使用在其中的固件，它提供远程监控和控制服务器的功能。 Lenovo System x服务器中的IMM2固件存在安全漏洞。本地攻击者可利用该漏洞获取登录证书。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lenovo Group Ltd. | Lenovo System x IMM2 | Lenovo System x IMM2 firmware versions earlier than 4.10 and IBM System x IMM2 firmware versions earlier than 6.20 | - |
II. Public POCs for CVE-2017-3744
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-3744
Please Login to view more intelligence information
- https://support.lenovo.com/product_security/LEN-14054x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-3744
Same Patch Batch · Lenovo Group Ltd. · 2017-06-20 · 3 CVEs total
| CVE-2017-3743 | 多款Lenovo产品安全漏洞 | |
| CVE-2017-3745 | Lenovo XClarity Administrator 信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-3744
No comments yet