What’s Vulnerable › Vulnerabilities

CVE-2019-6155

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-22 · updated 2026-06-17

Description

A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.

Affected products

• IBM Bladecenter Hs23 Firmware: before 3.0.0 — fixed in 3.0.0
• IBM System X3530 M4 Firmware: before 3.20 — fixed in 3.20
• IBM System X3630 M4 Firmware: before 3.20 — fixed in 3.20
• IBM System X3650 M4 Hd Firmware: before 2.40 — fixed in 2.40

How to fix

Upgrade to a fixed version: IBM Bladecenter Hs23 Firmware 3.0.0; IBM System X3530 M4 Firmware 3.20; IBM System X3630 M4 Firmware 3.20; IBM System X3650 M4 Hd Firmware 2.40. Check the vendor advisory for mitigations.

References

• https://support.lenovo.com/solutions/LEN-25165
• https://support.lenovo.com/solutions/LEN-25165

Get alerted when CVE-2019-6155 or the next vulnerability affects your stack