Skip to content
OpenAdvisories
High · 7.3 CVE-2025-15679 EUVD-2025-210890GHSA-g65q-w5wj-wm56

BMC root account active without password on BullSequana XH3406 and XH3515

Published Sep 11, 2026 · Updated Sep 11, 2026 · Assigned by Bull

Description

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.

Affected products

VendorProductAffectedFixed
Bull BullSequana XH3406 < TS 04.05 TS 04.05
Bull BullSequana XH3515 < TS 43.01 TS 43.01

References