CVE-2012-4856

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 2.0 7.9 High

Status

Modified - psirt@us.ibm.com

Published

2012-12-20

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Power 5 (Ibm)
• Power 5 System Firmware (Ibm)

References

• http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc
• http://www.kb.cert.org/vuls/id/194604
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79736