CVE-2017-3744

N/A

Published: June 20, 2017 at 12:00 AM UTC

Updated: June 17, 2026 at 01:18 AM UTC

48 products affected across 2 vendorsIntegrated Management Module FirmwareIntegrated Management Module FirmwareSystem X3530 M4

Using Lenovo System x IMM2 by Lenovo Group Ltd.?

Get instant alerts when new vulnerabilities affect Lenovo System x IMM2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.8%

Description

In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Integrated Management Module Firmware · IBM

95%

v ≤ 6.19

ibm-bladecenter-hs22 (environment) · ibm-bladecenter-hs23 (environment) · ibm-bladecenter-hs23e (environment) · ibm-flex-system-x220-m4 (environment) · ibm-flex-system-x222-m4 (environment) · ibm-flex-system-x240-m4 (environment) · ibm-flex-system-x280-m4 (environment) · ibm-flex-system-x440-m4 (environment) · ibm-flex-system-x480-m4 (environment) · ibm-flex-system-x880-m4 (environment) · ibm-idataplex-dx360-m4 (environment) · ibm-idataplex-dx360-m4-water-cooled (environment) · ibm-nextscale-nx360-m4 (environment) · ibm-system-x3100-m4 (environment) · ibm-system-x3100-m5 (environment) · ibm-system-x3250-m4 (environment) · ibm-system-x3250-m5 (environment) · ibm-system-x3300-m4 (environment) · ibm-system-x3500-m4 (environment) · ibm-system-x3530-m4 (environment) · ibm-system-x3550-m4 (environment) · ibm-system-x3630-m4 (environment) · ibm-system-x3650-m4 (environment) · ibm-system-x3650-m4-bd (environment) · ibm-system-x3650-m4-hd (environment) · ibm-system-x3750-m4 (environment) · ibm-system-x3850-x6 (environment) · ibm-system-x3950-x6 (environment)

Integrated Management Module Firmware · Lenovo

95%

v ≤ 4.9

lenovo-flex-system-x240-m4 (environment) · lenovo-flex-system-x240-m5 (environment) · lenovo-flex-system-x280-x6 (environment) · lenovo-flex-system-x440-m4 (environment) · lenovo-flex-system-x480-x6 (environment) · lenovo-flex-system-x880 (environment) · lenovo-nextscale-nx360-m5 (environment) · lenovo-system-x3250-m6 (environment) · lenovo-system-x3500-m5 (environment) · lenovo-system-x3550-m5 (environment) · lenovo-system-x3650-m5 (environment) · lenovo-system-x3750-m4 (environment) · lenovo-system-x3850-x6 (environment) · lenovo-system-x3950-x6 (environment) · lenovo-thinkagile-cx2200 (environment) · lenovo-thinkagile-cx4200 (environment) · lenovo-thinkagile-cx4600 (environment)

Integrated Management Module 2 · Lenovo

60%

v < 4.10

Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement

Bladecenter Hs22 · IBMdevice

80%

All versions

Bladecenter Hs23 · IBMdevice

80%

All versions

Bladecenter Hs23E · IBMdevice

80%