The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM…
Priority LOW 31CWE-310Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface.
Why it matters now
EPSS 0.01332 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64b:*:*:*:*:*:* | 3.64 bbet64b | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64c:*:*:*:*:*:* | 3.64 bbet64c | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64g:*:*:*:*:*:* | 3.64 bbet64g | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64b:*:*:*:*:*:* | 3.64 bpeo64b | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64c:*:*:*:*:*:* | 3.64 bpeo64c | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64g:*:*:*:*:*:* | 3.64 bpeo64g | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64b:*:*:*:*:*:* | 3.64 bpet64b | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64c:*:*:*:*:*:* | 3.64 bpet64c | Vulnerable | IBM |
| cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64g:*:*:*:*:*:* | 3.64 bpet64g | Vulnerable | IBM |
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64b:*:*:*:*:*:* Versions 3.64 bbet64b Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64c:*:*:*:*:*:* Versions 3.64 bbet64c Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bbet64g:*:*:*:*:*:* Versions 3.64 bbet64g Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64b:*:*:*:*:*:* Versions 3.64 bpeo64b Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64c:*:*:*:*:*:* Versions 3.64 bpeo64c Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpeo64g:*:*:*:*:*:* Versions 3.64 bpeo64g Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64b:*:*:*:*:*:* Versions 3.64 bpet64b Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64c:*:*:*:*:*:* Versions 3.64 bpet64c Vulnerable ·IBM
- cpe:2.3:o:ibm:advanced_management_module_firmware:3.64:bpet64g:*:*:*:*:*:* Versions 3.64 bpet64g Vulnerable ·IBM
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-6718
- 2026-10-03 Alias added: GHSA-5xv9-wc5r-crqg
References
More IBM Advanced Management Module Firmware vulnerabilities
- TI-2009-03732 Multiple unspecified vulnerabilities in the Advanced Management Module firmware before… CVSS 2.0HIGH 10.0
- TI-2016-06785 Cross-site scripting in Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 Earlier than… CVSS 3.0MEDIUM 6.1
- TI-2014-00792 The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2013-6718 · CVE Program
- CVE-2013-6718 · NVD
- FIRST EPSS
- GHSA-5xv9-wc5r-crqg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences