Unrated severityNVD Advisory· Published Nov 12, 2021· Updated Aug 3, 2024

CVE-2021-3723

Description

A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.

Affected products

IBM/System X3550 M3llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: all
IBM/System X3650 M3llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: all
IBM/Integrated Management Module Firmwarellm-fuzzy

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/product_security/LEN-66347mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000