Vulnerability CVE-2012-2187 - CERT Civis.Net

Vulnerability Name:

CVE-2012-2187 (CCN-75885)

Assigned:

2012-09-17

Published:

2012-09-17

Updated:

2013-02-12

Summary:

IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors.

CVSS v3 Severity:

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Other

References:

Source: MITRE
Type: CNA
CVE-2012-2187

Source: CCN
Type: IBM Security Bulletin S1004218
IBM XIV storage systems (MTM 2810-A14, 2812-A14) and IBM XIV Storage System Gen3 (MTM 2810-114, 2812-114) might use SSLV2 and/or weak keys

Source: CCN
Type: IBM Security Bulletin MIGR-5091525
Weak Key Vulnerability in Remote Supervisor Adapter II firmware (CVE-2012-2187) - IBM System x3650, System x3850 M2, System x3950 M2

Source: CONFIRM
Type: Vendor Advisory
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_weak_key_vulnerability_in_remote_supervisor_adapter_ii_firmware_cve_2012_2187_ibm_system_x3650_system_x3850_m2_system_x3950_m25

Source: BID
Type: UNKNOWN
55609

Source: CCN
Type: BID-55609
IBM Remote Supervisor Adapter II CVE-2012-2187 Security Bypass Vulnerability

Source: XF
Type: UNKNOWN
ibm-rsa-rsakey-weak-security(75885)

Source: CCN
Type: Freedom to Tinker Web site
New research: Theres no need to panic over factorable keysjust mind your Ps and Qs

Source: MISC
Type: UNKNOWN
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5091525

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.10:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.11:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:1.12:*:*:*:*:*:*:*

OR cpe:/a:ibm:remote_supervisor_adapter_ii_firmware:*:*:*:*:*:*:*:* (Version <= 1.13)

AND

cpe:/h:ibm:x3650:*:*:*:*:*:*:*:*

OR cpe:/h:ibm:x3850:m2:*:*:*:*:*:*:*

OR cpe:/h:ibm:x3950:m2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/h:ibm:xiv_storage_system:2810:*:*:*:*:*:*:*

OR cpe:/h:ibm:system_x3650_m2:-:*:*:*:*:*:*:*

Denotes that component is vulnerable