CVE-2013-4030 Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptogr...
MediumCVSS 4.3
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm integrated management module 2 | = 1.00 | No fix listed |
| ibm integrated management module 2 | = 2.00 | No fix listed |
| ibm bladecenter | = hs23 | No fix listed |
| ibm bladecenter | = hs23e | No fix listed |
| ibm flex system manager node 7955 | All versions | No fix listed |
| ibm flex system manager node 8731 | All versions | No fix listed |
| ibm flex system manager node 8734 | All versions | No fix listed |
| ibm flex system x220 compute node | All versions | No fix listed |
| ibm flex system x240 compute node | All versions | No fix listed |
| ibm flex system x440 compute node | All versions | No fix listed |
| ibm system x idataplex direct water cooled dx360 m4 server | All versions | No fix listed |
| ibm system x idataplex dx360 m4 server | All versions | No fix listed |
| ibm system x3100 m4 | All versions | No fix listed |
| ibm system x3250 m4 | All versions | No fix listed |
| ibm system x3300 m4 | All versions | No fix listed |
| ibm system x3500 m2 | All versions | No fix listed |
| ibm system x3500 m3 | All versions | No fix listed |
| ibm system x3500 m4 | All versions | No fix listed |
| ibm system x3530 m4 | All versions | No fix listed |
| ibm system x3550 m2 | All versions | No fix listed |
| ibm system x3550 m3 | All versions | No fix listed |
| ibm system x3550 m4 | All versions | No fix listed |
| ibm system x3630 m3 | All versions | No fix listed |
| ibm system x3630 m4 | All versions | No fix listed |
| ibm system x3630 m4 hd | All versions | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm system x3650 m2 | All versions | No fix listed |
| ibm system x3650 m3 | All versions | No fix listed |
| ibm system x3650 m4 | All versions | No fix listed |
| ibm system x3650 m4 hd | All versions | No fix listed |
| ibm system x3690 x5 | All versions | No fix listed |
| ibm system x3750 m4 | All versions | No fix listed |
| ibm system x3850 x5 | All versions | No fix listed |
| ibm system x3950 x5 | All versions | No fix listed |
References
- www.ibm.com vendor-advisory
- x-mgmt-cve20134030-encryption(86068) vdb-entry