CVE-2012-4856
7.9
Vector
AV:A/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 5.5 / Impact: 10.0
Source: NVD
Description
The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected (40)
Products: Ibm: Power 5 System Firmware, Power 5
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to sf240_418 | |
| Version 9110-510 |
Related CWEs
References (6)
Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.