What is CVE-2017-3768?

CVE-2017-3768 is a high-severity vulnerability in Ibm Bladecenter Hs22, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2018-01-26.

How severe is CVE-2017-3768?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Ibm Bladecenter Hs22

CVE-2017-3768

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x). Flooding the IMM2 with a high volume of authentication failures via the Common Information Model (CIM) used by LXCA and OneCLI and other tools can exhaust available system memory which can cause the IMM2 to reboot itself until the requests cease.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

psirt@lenovo.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-3768?: CVE-2017-3768 is a high-severity vulnerability in Ibm Bladecenter Hs22, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2018-01-26.
How severe is CVE-2017-3768?: High severity. CVSS v3 base score is 7.5 out of 10.