CVE-2017-3768 : Security Advisory and Response
Learn about CVE-2017-3768, a denial of service vulnerability affecting Lenovo IMM2 versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x. Find mitigation steps and patches.
CVE-2017-3768 was published on January 25, 2018, and affects Lenovo Group Ltd.'s Integrated Management Module 2 (IMM2) versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x.
Understanding CVE-2017-3768
This CVE involves a denial of service vulnerability that can be triggered by an unauthorized individual with access to the IMM2.
What is CVE-2017-3768?
If an attacker overwhelms the IMM2 with authentication failures via the Common Information Model (CIM), it can lead to the IMM2 becoming unavailable, continuously rebooting until the attack stops.
The Impact of CVE-2017-3768
The vulnerability allows for a denial of service attack, rendering the IMM2 inaccessible and disrupting system functionality.
Technical Details of CVE-2017-3768
This section provides more in-depth technical insights into the vulnerability.
Vulnerability Description
The vulnerability arises from flooding the IMM2 with authentication failures, depleting system memory and causing continuous reboots.
Affected Systems and Versions
- Integrated Management Module 2 (IMM2) versions earlier than 4.4 for Lenovo System x
- Integrated Management Module 2 (IMM2) versions earlier than 6.4 for IBM System x
Exploitation Mechanism
The attack is carried out by overwhelming the IMM2 with authentication failures via the Common Information Model (CIM) utilized by LXCA, OneCLI, and other tools.
Mitigation and Prevention
Protecting systems from CVE-2017-3768 requires immediate actions and long-term security practices.
Immediate Steps to Take
- Apply vendor-supplied patches promptly
- Monitor system logs for unusual authentication failures
- Restrict network access to the IMM2
Long-Term Security Practices
- Regularly update and patch systems
- Implement network segmentation to limit access to critical components
- Conduct security training for personnel
Patching and Updates
- Lenovo has provided patches to address this vulnerability
- Regularly check for updates and apply them to ensure system security