CVE-2010-1460

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-04-16 · updated 2026-06-16
Weakness: CWE-399

Description

The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.

Affected products

IBM Advanced Management Module: through 2.50; 1.00, 1.01, 1.20, 1.20-f, 1.25, 1.25-e (+27)

References

http://dsecrg.com/pages/vul/show.php?id=149
http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020
http://www.securityfocus.com/archive/1/510744/100/0/threaded
http://www.securityfocus.com/bid/39499
http://dsecrg.com/pages/vul/show.php?id=149
http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020
http://www.securityfocus.com/archive/1/510744/100/0/threaded
http://www.securityfocus.com/bid/39499

Get alerted when CVE-2010-1460 or the next vulnerability affects your stack