Multiple unspecified vulnerabilities in the Advanced Management Module firmware before…
Priority MEDIUM 46Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.
Why it matters now
EPSS 0.01446 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:ibm:advanced_management_module_firmware:*:*:*:*:*:*:*:* | up to 2.50c | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.20:*:*:*:*:*:*:* | 1.20 | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.20f:*:*:*:*:*:*:* | 1.20f | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.25:*:*:*:*:*:*:* | 1.25 | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.25e:*:*:*:*:*:*:* | 1.25e | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.25i:*:*:*:*:*:*:* | 1.25i | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.26b:*:*:*:*:*:*:* | 1.26b | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.26e:*:*:*:*:*:*:* | 1.26e | Vulnerable | IBM |
- cpe:2.3:h:ibm:advanced_management_module_firmware:*:*:*:*:*:*:*:* Versions up to 2.50c Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.20f:*:*:*:*:*:*:* Versions 1.20f Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.25e:*:*:*:*:*:*:* Versions 1.25e Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.25i:*:*:*:*:*:*:* Versions 1.25i Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.26b:*:*:*:*:*:*:* Versions 1.26b Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.26e:*:*:*:*:*:*:* Versions 1.26e Vulnerable ·IBM
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.26h:*:*:*:*:*:*:* | 1.26h | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.26i:*:*:*:*:*:*:* | 1.26i | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.26k:*:*:*:*:*:*:* | 1.26k | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.28g:*:*:*:*:*:*:* | 1.28g | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.32d:*:*:*:*:*:*:* | 1.32d | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.34b:*:*:*:*:*:*:* | 1.34b | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.34e:*:*:*:*:*:*:* | 1.34e | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.36d:*:*:*:*:*:*:* | 1.36d | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.36g:*:*:*:*:*:*:* | 1.36g | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.36h:*:*:*:*:*:*:* | 1.36h | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.36k:*:*:*:*:*:*:* | 1.36k | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42d:*:*:*:*:*:*:* | 1.42d | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42f:*:*:*:*:*:*:* | 1.42f | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42i:*:*:*:*:*:*:* | 1.42i | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42n:*:*:*:*:*:*:* | 1.42n | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42o:*:*:*:*:*:*:* | 1.42o | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:1.42t:*:*:*:*:*:*:* | 1.42t | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.46c:*:*:*:*:*:*:* | 2.46c | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.46j:*:*:*:*:*:*:* | 2.46j | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.48c:*:*:*:*:*:*:* | 2.48c | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.48d:*:*:*:*:*:*:* | 2.48d | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.48g:*:*:*:*:*:*:* | 2.48g | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.48l:*:*:*:*:*:*:* | 2.48l | Vulnerable | IBM |
| cpe:2.3:h:ibm:advanced_management_module_firmware:2.48n:*:*:*:*:*:*:* | 2.48n | Vulnerable | IBM |
| cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:* | t | Running on | IBM |
| cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:* | t | Running on | IBM |
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.26h:*:*:*:*:*:*:* Versions 1.26h Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.26i:*:*:*:*:*:*:* Versions 1.26i Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.26k:*:*:*:*:*:*:* Versions 1.26k Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.28g:*:*:*:*:*:*:* Versions 1.28g Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.32d:*:*:*:*:*:*:* Versions 1.32d Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.34b:*:*:*:*:*:*:* Versions 1.34b Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.34e:*:*:*:*:*:*:* Versions 1.34e Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.36d:*:*:*:*:*:*:* Versions 1.36d Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.36g:*:*:*:*:*:*:* Versions 1.36g Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.36h:*:*:*:*:*:*:* Versions 1.36h Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.36k:*:*:*:*:*:*:* Versions 1.36k Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42d:*:*:*:*:*:*:* Versions 1.42d Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42f:*:*:*:*:*:*:* Versions 1.42f Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42i:*:*:*:*:*:*:* Versions 1.42i Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42n:*:*:*:*:*:*:* Versions 1.42n Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42o:*:*:*:*:*:*:* Versions 1.42o Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:1.42t:*:*:*:*:*:*:* Versions 1.42t Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.46c:*:*:*:*:*:*:* Versions 2.46c Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.46j:*:*:*:*:*:*:* Versions 2.46j Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.48c:*:*:*:*:*:*:* Versions 2.48c Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.48d:*:*:*:*:*:*:* Versions 2.48d Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.48g:*:*:*:*:*:*:* Versions 2.48g Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.48l:*:*:*:*:*:*:* Versions 2.48l Vulnerable ·IBM
- cpe:2.3:h:ibm:advanced_management_module_firmware:2.48n:*:*:*:*:*:*:* Versions 2.48n Vulnerable ·IBM
- cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:* Versions t Running on ·IBM
- cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:* Versions t Running on ·IBM
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2009-3935
- 2026-10-03 Alias added: GHSA-rx2j-hfvv-qg82
References
Patch 1
More IBM Advanced Management Module Firmware vulnerabilities
- TI-2013-05534 The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM… CVSS 2.0MEDIUM 6.4
- TI-2016-06785 Cross-site scripting in Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 Earlier than… CVSS 3.0MEDIUM 6.1
- TI-2014-00792 The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2009-3935 · CVE Program
- CVE-2009-3935 · NVD
- FIRST EPSS
- GHSA-rx2j-hfvv-qg82 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences