flex system x440 m4 firmware vulnerabilities and fixes

Recent CVEs affecting flex system x440 m4 firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: flexsystemx440m4firmware.

flex system x440 m4 firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-04-22. Highest priority: CVE-2017-3768 (score 48/100).

• CVE-2019-6157 MEDIUM 6.5 UPGRADE UPGRADE In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure da
• CVE-2018-9085 MEDIUM 4.9 UPGRADE UPGRADE A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x server
• CVE-2018-9068 HIGH 7.5 UPGRADE UPGRADE The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a
• CVE-2017-3768 HIGH 7.5 UPGRADE UPGRADE An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Ver

FAQ

How do I fix flex system x440 m4 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is flex system x440 m4 firmware being exploited right now?

None of the tracked flex system x440 m4 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which flex system x440 m4 firmware CVE should I patch first?

CVE-2017-3768 currently ranks highest (48/100): An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Ver.

RSS feed for flex system x440 m4 firmware · ← Back to latest CVEs