CVE-2014-0860: The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in...

Security readout for executives and security teams

Older IBM BladeCenter management firmware stored IPMI credentials in cleartext. An attacker with access to the chassis internal network or Ethernet-over-USB interface could run IPMI commands and potentially open a remote-control session to blades. Exposure is most likely in legacy IBM BladeCenter environments running outdated AMM, IMM, or IMM2 firmware, especially where internal chassis management networks or Ethernet-over-USB interfaces are accessible beyond tightly controlled administrators. Prioritize remediation for production BladeCenter systems and environments with broad management-network access. The business risk is administrative control of blade infrastructure, but evidence in the bundle does not prove active exploitation. Mitigation focus: Update AMM firmware to 3.66E or later.; Update IMM firmware to 1.43 or later.; Update IMM2 firmware to 4.15 or later..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.