Is CVE-2017-3744 actively exploited?

No active exploitation of CVE-2017-3744 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-3744 be exploited remotely?

Yes. CVE-2017-3744 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2017-3744?

CVE-2017-3744 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2017-3744

MEDIUM

CVE-2017-3744

CWE-532Published: June 20, 2017· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.

NVD Source

Technical Analysis

CVE-2017-3744 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

IBM29 product(s)

integrated management module firmwarebladecenter hs22bladecenter hs23bladecenter hs23eflex system x220 m4flex system x222 m4flex system x240 m4flex system x280 m4flex system x440 m4flex system x480 m4flex system x880 m4idataplex dx360 m4+17

Lenovo18 product(s)

integrated management module firmwareflex system x240 m4flex system x240 m5flex system x280 x6flex system x440 m4flex system x480 x6flex system x880nextscale nx360 m5system x3250 m6system x3500 m5system x3550 m5system x3650 m5+6

Source: NVD CPE · 47 total CPE entries