PT-2012-3867 · Ibm · Ibm Remote Supervisor Adapter Ii

Published 2012-09-25 · Updated 2013-02-12 · CVE-2012-2187

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 version 1.13 and earlier

Description The issue generates weak RSA keys, making it easier for attackers to defeat cryptographic protection mechanisms.

Recommendations For IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 version 1.13 and earlier, update to a version later than 1.13 to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-2187

Affected Products

Ibm Remote Supervisor Adapter Ii

References · 5

• http://ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_adapter_ii_firmware_cve_2012_2187_ibm_system_x3650_system_x3850_m2_system_x3950_m25 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2187 · Security Note
• http://securityfocus.com/bid/55609 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2187 · Note
• https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5091525 · Note