CVE-2009-3935: Critical severity ibm advanced management module vulnerability

Published Nov 12, 2009
·
Updated

Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.

Affected Software

36 affected components
IBM Advanced Management Module firmware<=2.50c
IBM Advanced Management Module firmware=1.00
IBM Advanced Management Module firmware=1.01
IBM Advanced Management Module firmware=1.20
IBM Advanced Management Module firmware=1.20f
IBM Advanced Management Module firmware=1.25
IBM Advanced Management Module firmware=1.25e
IBM Advanced Management Module firmware=1.25i
IBM Advanced Management Module firmware=1.26b
IBM Advanced Management Module firmware=1.26e
IBM Advanced Management Module firmware=1.26h
IBM Advanced Management Module firmware=1.26i
IBM Advanced Management Module firmware=1.26k
IBM Advanced Management Module firmware=1.28g
IBM Advanced Management Module firmware=1.32d
IBM Advanced Management Module firmware=1.34b
IBM Advanced Management Module firmware=1.34e
IBM Advanced Management Module firmware=1.36d
IBM Advanced Management Module firmware=1.36g
IBM Advanced Management Module firmware=1.36h
IBM Advanced Management Module firmware=1.36k
IBM Advanced Management Module firmware=1.42d
IBM Advanced Management Module firmware=1.42f
IBM Advanced Management Module firmware=1.42i
IBM Advanced Management Module firmware=1.42n
IBM Advanced Management Module firmware=1.42o
IBM Advanced Management Module firmware=1.42t
IBM Advanced Management Module firmware=2.46c
IBM Advanced Management Module firmware=2.46j
IBM Advanced Management Module firmware=2.48c
IBM Advanced Management Module firmware=2.48d
IBM Advanced Management Module firmware=2.48g
IBM Advanced Management Module firmware=2.48l
IBM Advanced Management Module firmware=2.48n
IBM BladeCenter=t
IBM BladeCenter=t

Remediation

Patch Available

ftp://download2.boulder.ibm.com/ecc/sar/CMA/XSA/00pj6/0/ibm_fw_amm_bbet50g_anyos_noarch.chg

Patch Available

http://www.securityfocus.com/bid/36970

Patch Available

http://www.vupen.com/english/advisories/2009/3188

Event History

Nov 12, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
05:54 PM
DescriptionWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2009-3935?

The severity of CVE-2009-3935 is currently unknown due to the unspecified nature of the vulnerabilities.

2

How do I fix CVE-2009-3935?

To mitigate CVE-2009-3935, upgrade the Advanced Management Module firmware to version 2.50G or later.

3

Which IBM BladeCenter models are affected by CVE-2009-3935?

CVE-2009-3935 affects IBM BladeCenter T models 8720-2xx and 8730-2xx with specific firmware versions prior to 2.50G.

4

Are there workarounds for CVE-2009-3935?

There are no widely acknowledged workarounds for CVE-2009-3935, thus updating is recommended.

5

What should I do if I cannot update to firmware version 2.50G for CVE-2009-3935?

If you cannot update to firmware version 2.50G, consider isolating the vulnerable systems and limiting their exposure to untrusted networks.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203