Root Account Vulnerability in BMC Products by Atos
CVE-2025-15679

7.3HIGH

Key Information:

Vendor

Bull

Status
Bullsequana Xh3406
Bullsequana Xh3515
Vendor
CVE Published:
11 September 2026

What is CVE-2025-15679?

A security issue has been identified in Atos BMC products, where the root account can be activated without a password during specific operations, such as when the device is reset to factory defaults. This vulnerability poses a significant risk by allowing unauthorized access to sensitive system functionalities, which can lead to exploitation if not addressed promptly. It is essential for users and administrators to implement security best practices and monitor for updates regarding this issue.

Affected Version(s)

BullSequana XH3406 0

BullSequana XH3515 0

References

https://myatos.my.site.com/psmcustomer/s/contentdocument/...
vendor-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.