high7.9
CVE-2012-4856
The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attacke…
Impact
The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Power 5 System Firmware | through sf240_418 Versions sf240_201_201, sf240_202_201, sf240_219_201, sf240_222_201, sf240_233_201 |
| Ibm | Power 5 | Versions 9110-51a, 9110-510, 9111-285, 9111-520, 9113-550, 9115-505 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc
- http://www.kb.cert.org/vuls/id/194604
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79736
- http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc
- http://www.kb.cert.org/vuls/id/194604
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79736