Read the docs
TI-2010-01413 Aliases CVE-2010-1460GHSA-2768-2mfm-w93v

The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does…

Priority LOW 28CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.

Why it matters now

EPSS 0.02769 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 35

CPEVersionsRoleVendor
cpe:2.3:h:ibm:advanced_management_module:*:c:*:*:*:*:*:*up to 2.50VulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:*1.00VulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:*1.01VulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:*1.20VulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:*1.20 fVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:*1.25VulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:*1.25 eVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:*1.25 iVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:*1.26 bVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.26:e:*:*:*:*:*:*1.26 eVulnerableIBM
  • cpe:2.3:h:ibm:advanced_management_module:*:c:*:*:*:*:*:* Versions up to 2.50 Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:* Versions 1.20 f Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:* Versions 1.25 e Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:* Versions 1.25 i Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:* Versions 1.26 b Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.26:e:*:*:*:*:*:* Versions 1.26 e Vulnerable ·IBM
Show 25 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:ibm:advanced_management_module:1.26:h:*:*:*:*:*:*1.26 hVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.26:i:*:*:*:*:*:*1.26 iVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.26:k:*:*:*:*:*:*1.26 kVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.28:g:*:*:*:*:*:*1.28 gVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.32:d:*:*:*:*:*:*1.32 dVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.34:b:*:*:*:*:*:*1.34 bVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.34:e:*:*:*:*:*:*1.34 eVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.36:d:*:*:*:*:*:*1.36 dVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.36:g:*:*:*:*:*:*1.36 gVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.36:h:*:*:*:*:*:*1.36 hVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.36:k:*:*:*:*:*:*1.36 kVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:d:*:*:*:*:*:*1.42 dVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:f:*:*:*:*:*:*1.42 fVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:i:*:*:*:*:*:*1.42 iVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:n:*:*:*:*:*:*1.42 nVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:o:*:*:*:*:*:*1.42 oVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:1.42:t:*:*:*:*:*:*1.42 tVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:*2.46 cVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.46:j:*:*:*:*:*:*2.46 jVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.48:c:*:*:*:*:*:*2.48 cVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.48:d:*:*:*:*:*:*2.48 dVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.48:g:*:*:*:*:*:*2.48 gVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.48:l:*:*:*:*:*:*2.48 lVulnerableIBM
cpe:2.3:h:ibm:advanced_management_module:2.48:n:*:*:*:*:*:*2.48 nVulnerableIBM
cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*all versionsRunning onIBM
  • cpe:2.3:h:ibm:advanced_management_module:1.26:h:*:*:*:*:*:* Versions 1.26 h Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.26:i:*:*:*:*:*:* Versions 1.26 i Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.26:k:*:*:*:*:*:* Versions 1.26 k Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.28:g:*:*:*:*:*:* Versions 1.28 g Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.32:d:*:*:*:*:*:* Versions 1.32 d Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.34:b:*:*:*:*:*:* Versions 1.34 b Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.34:e:*:*:*:*:*:* Versions 1.34 e Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.36:d:*:*:*:*:*:* Versions 1.36 d Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.36:g:*:*:*:*:*:* Versions 1.36 g Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.36:h:*:*:*:*:*:* Versions 1.36 h Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.36:k:*:*:*:*:*:* Versions 1.36 k Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:d:*:*:*:*:*:* Versions 1.42 d Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:f:*:*:*:*:*:* Versions 1.42 f Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:i:*:*:*:*:*:* Versions 1.42 i Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:n:*:*:*:*:*:* Versions 1.42 n Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:o:*:*:*:*:*:* Versions 1.42 o Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:1.42:t:*:*:*:*:*:* Versions 1.42 t Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:* Versions 2.46 c Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.46:j:*:*:*:*:*:* Versions 2.46 j Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.48:c:*:*:*:*:*:* Versions 2.48 c Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.48:d:*:*:*:*:*:* Versions 2.48 d Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.48:g:*:*:*:*:*:* Versions 2.48 g Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.48:l:*:*:*:*:*:* Versions 2.48 l Vulnerable ·IBM
  • cpe:2.3:h:ibm:advanced_management_module:2.48:n:*:*:*:*:*:* Versions 2.48 n Vulnerable ·IBM
  • cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:* Versions all versions Running on ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1460
  2. 2026-10-03 Alias added: GHSA-2768-2mfm-w93v

References

Patch 1

Other 1

  • TI-2009-01225 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration… CVSS 2.0MEDIUM 6.8
  • TI-2010-02546 The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and… CVSS 2.0MEDIUM 5.0
  • TI-2014-00792 The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the… CVSS 2.0MEDIUM 5.0
  • TI-2010-02544 Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced… CVSS 2.0MEDIUM 4.3
  • TI-2009-01223 Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module… CVSS 2.0MEDIUM 4.3
  • TI-2010-02545 Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter… CVSS 2.0MEDIUM 4.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences