CVE-2012-2187

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-25 · updated 2026-06-16
Weakness: CWE-310

Description

IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors.

Affected products

IBM Remote Supervisor Adapter Ii Firmware: through 1.13; 1.0, 1.1, 1.2, 1.3, 1.4, 1.5 (+7)

References

http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_adapter_ii_firmware_cve_2012_2187_ibm_system_x3650_system_x3850_m2_system_x3950_m25
http://www.securityfocus.com/bid/55609
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5091525
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_adapter_ii_firmware_cve_2012_2187_ibm_system_x3650_system_x3850_m2_system_x3950_m25
http://www.securityfocus.com/bid/55609
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5091525

Get alerted when CVE-2012-2187 or the next vulnerability affects your stack