What is the CVSS score of CVE-2013-4030?

CVE-2013-4030 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.2%.

Integrated Management Module 2 CVE-2013-4030

MEDIUM

Cryptographic Issues (CWE-310)

2014-01-21 psirt@us.ibm.com

Information Disclosure IBM Integrated Management Module 2 Bladecenter Flex System Manager Node 7955 Flex System Manager Node 8731 Flex System Manager Node 8734 Flex System X220 Compute Node Flex System X240 Compute Node Flex System X440 Compute Node System X Idataplex Direct Water Cooled Dx360 M4 Server System X Idataplex Dx360 M4 Server System X3100 M4 System X3250 M4 System X3300 M4 System X3500 M2 System X3500 M3 System X3500 M4 System X3530 M4 System X3550 M2 System X3550 M3 System X3550 M4 System X3630 M3 System X3630 M4 System X3630 M4 Hd System X3650 M2 System X3650 M3 System X3650 M4 System X3650 M4 Hd System X3690 X5 System X3750 M4 System X3850 X5 System X3950 X5

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Jan 21, 2014 - 01:55 cve.org

MEDIUM 4.3

DescriptionCVE.org

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.

AnalysisAI

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic. Affected products include: Ibm Integrated Management Module 2, Ibm Bladecenter, Ibm Flex System Manager Node 7955, Ibm Flex System Manager Node 8731, Ibm Flex System Manager Node 8734. Version information: through 2.00.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.