CVE-2014-4768: Low severity ibm uefi vulnerability

Published Jun 28, 2015
·
Updated

IBM Unified Extensible Firmware Interface (UEFI) on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode.

Affected Software

4 affected components
IBM UEFI
IBM Flex System X3850 X6
IBM Flex System X3950 X6
IBM Flex System x880 X6

Event History

Jun 28, 2015
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2014-4768?

The severity of CVE-2014-4768 is not explicitly rated, but it can lead to a temporary denial of service for systems that utilize IBM Unified Extensible Firmware Interface.

2

How do I fix CVE-2014-4768?

To fix CVE-2014-4768, ensure that legacy boot mode is not enabled for remote authenticated users.

3

Who is affected by CVE-2014-4768?

CVE-2014-4768 affects IBM Unified Extensible Firmware Interface on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices.

4

What type of attack can CVE-2014-4768 facilitate?

CVE-2014-4768 can facilitate a temporary denial of service attack by using privileged access to enable legacy boot mode.

5

Is the risk from CVE-2014-4768 limited to certain IBM systems?

Yes, the risk from CVE-2014-4768 is limited to specific models of IBM servers, namely the Flex System x880 X6, System x3850 X6, and System x3950 X6.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203