VULNERABILITY INTELLIGENCE

CVE-2021-3723

CVSS score7.2 HIGH
EPSS probability1.94%
CISA KEVNot currently listed
Published2021-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.

Weakness classification

  • psirt@lenovo.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references