CVE-2010-1460

  • Last update: Apr 13, 2023

Description

The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.

Software From Fixed in
ibm / advanced_management_module - 2.50.x
ibm / advanced_management_module 1.00 1.00.x
ibm / advanced_management_module 1.01 1.01.x
ibm / advanced_management_module 1.20 1.20.x
ibm / advanced_management_module 1.20-f 1.20-f.x
ibm / advanced_management_module 1.25 1.25.x
ibm / advanced_management_module 1.25-e 1.25-e.x
ibm / advanced_management_module 1.25-i 1.25-i.x
ibm / advanced_management_module 1.26-b 1.26-b.x
ibm / advanced_management_module 1.26-e 1.26-e.x
ibm / advanced_management_module 1.26-h 1.26-h.x
ibm / advanced_management_module 1.26-i 1.26-i.x
ibm / advanced_management_module 1.26-k 1.26-k.x
ibm / advanced_management_module 1.28-g 1.28-g.x
ibm / advanced_management_module 1.32-d 1.32-d.x
ibm / advanced_management_module 1.34-b 1.34-b.x
ibm / advanced_management_module 1.34-e 1.34-e.x
ibm / advanced_management_module 1.36-d 1.36-d.x
ibm / advanced_management_module 1.36-g 1.36-g.x
ibm / advanced_management_module 1.36-h 1.36-h.x
ibm / advanced_management_module 1.36-k 1.36-k.x
ibm / advanced_management_module 1.42-d 1.42-d.x
ibm / advanced_management_module 1.42-f 1.42-f.x
ibm / advanced_management_module 1.42-i 1.42-i.x
ibm / advanced_management_module 1.42-n 1.42-n.x
ibm / advanced_management_module 1.42-o 1.42-o.x
ibm / advanced_management_module 1.42-t 1.42-t.x
ibm / advanced_management_module 2.46-c 2.46-c.x
ibm / advanced_management_module 2.46-j 2.46-j.x
ibm / advanced_management_module 2.48-c 2.48-c.x
ibm / advanced_management_module 2.48-d 2.48-d.x
ibm / advanced_management_module 2.48-g 2.48-g.x
ibm / advanced_management_module 2.48-l 2.48-l.x
ibm / advanced_management_module 2.48-n 2.48-n.x

Details

    • Severity: Medium
  • CVE: CVE-2010-1460
  • Published: Apr 16, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs