What is the severity of CVE-2014-4768?

The severity of CVE-2014-4768 is not explicitly rated, but it can lead to a temporary denial of service for systems that utilize IBM Unified Extensible Firmware Interface.

How do I fix CVE-2014-4768?

To fix CVE-2014-4768, ensure that legacy boot mode is not enabled for remote authenticated users.

Who is affected by CVE-2014-4768?

CVE-2014-4768 affects IBM Unified Extensible Firmware Interface on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices.

What type of attack can CVE-2014-4768 facilitate?

CVE-2014-4768 can facilitate a temporary denial of service attack by using privileged access to enable legacy boot mode.

Is the risk from CVE-2014-4768 limited to certain IBM systems?

Yes, the risk from CVE-2014-4768 is limited to specific models of IBM servers, namely the Flex System x880 X6, System x3850 X6, and System x3950 X6.

Vulnerability/
CVE-2014-4768

low

2.1

28/6/2015

6/8/2024

CVE-2014-4768

First published: Sun Jun 28 2015(Updated: )

IBM Unified Extensible Firmware Interface (UEFI) on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
Ibm Uefi
Lenovo Flex System X3850 X6
Lenovo Flex System X3950 X6
Lenovo Flex System X880 X6 Bios

Never miss a vulnerability like this again

Reference Links

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098278

Frequently Asked Questions

What is the severity of CVE-2014-4768?
The severity of CVE-2014-4768 is not explicitly rated, but it can lead to a temporary denial of service for systems that utilize IBM Unified Extensible Firmware Interface.
How do I fix CVE-2014-4768?
To fix CVE-2014-4768, ensure that legacy boot mode is not enabled for remote authenticated users.
Who is affected by CVE-2014-4768?
CVE-2014-4768 affects IBM Unified Extensible Firmware Interface on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices.
What type of attack can CVE-2014-4768 facilitate?
CVE-2014-4768 can facilitate a temporary denial of service attack by using privileged access to enable legacy boot mode.
Is the risk from CVE-2014-4768 limited to certain IBM systems?
Yes, the risk from CVE-2014-4768 is limited to specific models of IBM servers, namely the Flex System x880 X6, System x3850 X6, and System x3950 X6.

agent/type
collector/mitre-cve
source/MITRE
agent/references
agent/author
agent/severity
agent/last-modified-date
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/ibm
canonical/ibm uefi
canonical/lenovo flex system x3850 x6
canonical/lenovo flex system x3950 x6
canonical/lenovo flex system x880 x6 bios

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.