CVE-2017-3774

N/A

Published: April 19, 2018 at 02:00 PM UTC

Updated: June 17, 2026 at 01:18 AM UTC

44 products affected across 2 vendorsIntegrated Management Module 2System X3530 M4System X3630 M4

Using IMM2 by Lenovo Group Ltd.?

Get instant alerts when new vulnerabilities affect IMM2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Integrated Management Module 2 · Lenovo

95%

v < 4.40v < 4.70v < 6.60

Affected range stops below 4.40, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.70, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.60, so it looks safe — our inference, not a vendor statement

ibm-bladecenter-hs22 (environment) · ibm-bladecenter-hs23 (environment) · ibm-bladecenter-hs23e (environment) · ibm-flex-system-x220-m4 (environment) · ibm-flex-system-x222-m4 (environment) · ibm-flex-system-x240-m4 (environment) · ibm-flex-system-x280-m4 (environment) · ibm-flex-system-x440-m4 (environment) · ibm-flex-system-x480-m4 (environment) · ibm-flex-system-x880-m4 (environment) · ibm-idataplex-dx360-m4 (environment) · ibm-idataplex-dx360-m4-water-cooled (environment) · ibm-nextscale-nx360-m4 (environment) · ibm-system-x3100-m4 (environment) · ibm-system-x3100-m5 (environment) · ibm-system-x3250-m4 (environment) · ibm-system-x3250-m5 (environment) · ibm-system-x3300-m4 (environment) · ibm-system-x3500-m4 (environment) · ibm-system-x3530-m4 (environment) · ibm-system-x3550-m4 (environment) · ibm-system-x3630-m4 (environment) · ibm-system-x3650-m4 (environment) · ibm-system-x3650-m4-bd (environment) · ibm-system-x3650-m4-hd (environment) · ibm-system-x3750-m4 (environment) · ibm-system-x3850-x6 (environment) · ibm-system-x3950-x6 (environment) · lenovo-flex-system-x240-m4 (environment) · lenovo-flex-system-x240-m5 (environment) · lenovo-flex-system-x280-x6 (environment) · lenovo-flex-system-x440-m4 (environment) · lenovo-flex-system-x480-x6 (environment) · lenovo-flex-system-x880 (environment) · lenovo-nextscale-nx360-m5 (environment) · lenovo-system-x3250-m6 (environment) · lenovo-system-x3500-m5 (environment) · lenovo-system-x3550-m5 (environment) · lenovo-system-x3650-m5 (environment) · lenovo-system-x3750-m4 (environment) · lenovo-system-x3850-x6 (environment) · lenovo-system-x3950-x6 (environment)

Integrated Management Module 2 · IBM

60%

v < 6.60

Affected range stops below 6.60, so it looks safe — our inference, not a vendor statement

Bladecenter Hs22 · IBMdevice

80%

All versions

Bladecenter Hs23 · IBMdevice

80%

All versions

Bladecenter Hs23E · IBMdevice

80%