What’s Vulnerable › Vulnerabilities

CVE-2014-0881

• Severity: high (CVSS 7.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-25 · updated 2026-06-17
• Weakness: CWE-284

Description

The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146.

Affected products

• IBM Integrated Management Module Firmware: from 1.00 through 3.56

References

• https://support.lenovo.com/us/en/solutions/ht114524
• https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
• https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725
• https://support.lenovo.com/us/en/solutions/ht114524
• https://www.ibm.com/blogs/psirt/security-bulletin-tpm-on-the-integrated-management-module-ii-imm2-of-flex-system-x222-compute-node-is-not-configured-correctly-cve-2014-0881/
• https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094725

Get alerted when CVE-2014-0881 or the next vulnerability affects your stack