PT-2025-7423 · Atos · Atos Eviden Bullsequana Xh2140 Bmc

Published 2025-02-20 · Updated 2025-02-21 · CVE-2024-46933

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AC:H/AV:N/A:H/C:N/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Atos Eviden BullSequana XH2140 BMC versions before C4EM-125: OMF C4E 101.05.0014

Description An issue was discovered in Atos Eviden BullSequana XH2140 BMC, where some products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access.

Recommendations For Atos Eviden BullSequana XH2140 BMC versions before C4EM-125: OMF C4E 101.05.0014, update to a version that includes the proper hardware programming to prevent the potential denial-of-service with privileged access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-46933

Affected Products

Atos Eviden Bullsequana Xh2140 Bmc

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-46933 · Security Note
• https://twitter.com/CVEnew/status/1892632868670652853 · Twitter Post
• https://t.me/cvedetector/18592 · Telegram Post
• https://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-270-tlp-clear-version-2-7-cve-2024-46933/view · Note
• https://twitter.com/VulmonFeeds/status/1892745452757328285 · Twitter Post
• https://eviden.com · Note