CVE-2013-4030
First published: Tue Jan 21 2014(Updated: )
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Integrated Management Module 2 | =1.00 | |
| Lenovo Integrated Management Module 2 | =2.00 | |
| IBM BladeCenter | =hs23 | |
| IBM BladeCenter | =hs23e | |
| IBM Flex System Manager | ||
| IBM Flex System Manager | ||
| IBM Flex System Manager Node 8734 | ||
| IBM Flex System X220 Compute Node | ||
| IBM Flex System X240 | ||
| IBM Flex System X440 | ||
| IBM System X iDataPlex DX360 M4 Server | ||
| IBM iDataplex Dx360 M4 | ||
| Ibm System X3100 M4 Firmware | ||
| IBM System X3250 M4 Firmware | ||
| Lenovo System X3300 M4 | ||
| Lenovo System X3500 M2 | ||
| Lenovo System X3500 M3 | ||
| Lenovo System X3500 M4 Firmware | ||
| Lenovo System X3530 M4 | ||
| Lenovo System X3560 M2 | ||
| Lenovo System X3550 M3 Firmware | ||
| Lenovo System X3550 M4 | ||
| Lenovo System X3630 M3 | ||
| Lenovo System X3630 M4 | ||
| IBM System X3630 M4 | ||
| IBM System X3650 M2 | ||
| Lenovo System X3650 M3 Firmware | ||
| IBM System x3650 M4 Firmware | ||
| Lenovo System X3650 M4 HD | ||
| Lenovo System X3690 X5 Firmware | ||
| Lenovo System X3750 M4 | ||
| Lenovo System X3850 X5 | ||
| Lenovo System X3950 X5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4030?
CVE-2013-4030 is considered a high severity vulnerability due to the potential for brute-force attacks on weak SSL/TLS encryption.
How do I fix CVE-2013-4030?
To fix CVE-2013-4030, ensure that your IBM Integrated Management Module (IMM) firmware is updated to versions higher than 2.00, which disable weak cipher suites.
What systems are affected by CVE-2013-4030?
CVE-2013-4030 affects IBM System X and Flex System servers running IMM versions 1.00 through 2.00.
What types of attacks can exploit CVE-2013-4030?
CVE-2013-4030 can be exploited via remote brute-force attacks targeting SSL or TLS traffic.
Is it safe to ignore CVE-2013-4030 if my system is not directly exposed to the internet?
Ignoring CVE-2013-4030 is risky, as internal threats or compromised systems can still exploit this vulnerability.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/lenovo integrated management module 2
- version/lenovo integrated management module 2/1.00
- version/lenovo integrated management module 2/2.00
- canonical/ibm bladecenter
- version/ibm bladecenter/hs23
- version/ibm bladecenter/hs23e
- canonical/ibm flex system manager
- canonical/ibm flex system manager node 8734
- canonical/ibm flex system x220 compute node
- canonical/ibm flex system x240
- canonical/ibm flex system x440
- canonical/ibm system x idataplex dx360 m4 server
- canonical/ibm idataplex dx360 m4
- canonical/ibm system x3100 m4 firmware
- canonical/ibm system x3250 m4 firmware
- canonical/lenovo system x3300 m4
- canonical/lenovo system x3500 m2
- canonical/lenovo system x3500 m3
- canonical/lenovo system x3500 m4 firmware
- canonical/lenovo system x3530 m4
- canonical/lenovo system x3560 m2
- canonical/lenovo system x3550 m3 firmware
- canonical/lenovo system x3550 m4
- canonical/lenovo system x3630 m3
- canonical/lenovo system x3630 m4
- canonical/ibm system x3630 m4
- canonical/ibm system x3650 m2
- canonical/lenovo system x3650 m3 firmware
- canonical/ibm system x3650 m4 firmware
- canonical/lenovo system x3650 m4 hd
- canonical/lenovo system x3690 x5 firmware
- canonical/lenovo system x3750 m4
- canonical/lenovo system x3850 x5
- canonical/lenovo system x3950 x5