CVEvulnerability

CVE-2012-4856

7.9 HIGH Published 2012-12-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255

Description

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

• ibm power 5 system firmware (<= sf240 418) • ibm power 5 system firmware sf240 201 201 • ibm power 5 system firmware sf240 202 201 • ibm power 5 system firmware sf240 219 201 • ibm power 5 system firmware sf240 222 201 • ibm power 5 system firmware sf240 233 201 • ibm power 5 system firmware sf240 258 201 • ibm power 5 system firmware sf240 259 201 • ibm power 5 system firmware sf240 261 201 • ibm power 5 system firmware sf240 284 201 • ibm power 5 system firmware sf240 298 201 • ibm power 5 system firmware sf240 299 201 • ibm power 5 system firmware sf240 320 201 • ibm power 5 system firmware sf240 332 201 • ibm power 5 system firmware sf240 338 201 • ibm power 5 system firmware sf240 358 201 • ibm power 5 system firmware sf240 371 • ibm power 5 system firmware sf240 382 382 • ibm power 5 system firmware sf240 403 382 • ibm power 5 system firmware sf240 415 382 • ibm power 5 system firmware sf240 417 • ibm power 5 9110-51a • ibm power 5 9110-510 • ibm power 5 9111-285 • ibm power 5 9111-520 • ibm power 5 9113-550 • ibm power 5 9115-505 • ibm power 5 9116-561 • ibm power 5 9117-570 • ibm power 5 9118-575 • ibm power 5 9123-710 • ibm power 5 9124-720 • ibm power 5 9131-52a • ibm power 5 9133-55a • ibm power 5 9405-520 • ibm power 5 9406-520 • ibm power 5 9406-525 • ibm power 5 9406-550 • ibm power 5 9406-570 • ibm power 5 9407-515

Related

Weakness · not in database (1)

References