Vulnerability Description
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Advanced Management Module | <= 2.50 |
| Ibm | Bladecenter | All versions |
Related Weaknesses (CWE)
References
- http://dsecrg.com/pages/vul/show.php?id=149
- http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5Patch
- http://www.securityfocus.com/archive/1/510744/100/0/threaded
- http://www.securityfocus.com/bid/39499Exploit
- http://dsecrg.com/pages/vul/show.php?id=149
- http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5Patch
- http://www.securityfocus.com/archive/1/510744/100/0/threaded
- http://www.securityfocus.com/bid/39499Exploit
FAQ
What is CVE-2010-1460?
CVE-2010-1460 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of serv...
How severe is CVE-2010-1460?
CVE-2010-1460 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-1460?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Advanced Management Module, Ibm Bladecenter.