Bladecenter Hs23 Firmware
CVE-2019-6155
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.
AnalysisAI
A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service. Affected products include: Ibm Bladecenter Hs23 Firmware, Ibm System X3530 M4 Firmware, Ibm System X3630 M4 Firmware, Ibm System X3650 M4 Hd Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Bladecenter Hs23 Firmware
View allIn various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture
The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo an
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potenti
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today