What’s Vulnerable › Vulnerabilities

CVE-2013-4030

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-21 · updated 2026-06-16
• Weakness: CWE-310

Description

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.

Affected products

• IBM Bladecenter: hs23, hs23e
• IBM Flex System Manager Node 7955: all versions
• IBM Flex System Manager Node 8731: all versions
• IBM Flex System Manager Node 8734: all versions
• IBM Flex System X220 Compute Node: all versions
• IBM Flex System X240 Compute Node: all versions
• IBM Flex System X440 Compute Node: all versions
• IBM Integrated Management Module 2: 1.00, 2.00
• IBM System X3100 M4: all versions
• IBM System X3250 M4: all versions
• IBM System X3300 M4: all versions
• IBM System X3500 M2: all versions
• IBM System X3500 M3: all versions
• IBM System X3500 M4: all versions
• IBM System X3530 M4: all versions
• IBM System X3550 M2: all versions
• IBM System X3550 M3: all versions
• IBM System X3550 M4: all versions
• IBM System X3630 M3: all versions
• IBM System X3630 M4: all versions
• IBM System X3630 M4 Hd: all versions
• IBM System X3650 M2: all versions
• IBM System X3650 M3: all versions
• IBM System X3650 M4: all versions
• IBM System X3650 M4 Hd: all versions
• IBM System X3690 X5: all versions
• IBM System X3750 M4: all versions
• IBM System X3850 X5: all versions
• IBM System X3950 X5: all versions
• IBM System X Idataplex Direct Water Cooled Dx360 M4 Server: all versions

References

• http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86068
• http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86068

Get alerted when CVE-2013-4030 or the next vulnerability affects your stack