Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2012-4856
HistoryDec 20, 2012 - 12:02 p.m.

CVE-2012-4856

2012-12-2012:02:18
CWE-255
ibm
web.nvd.nist.gov
24
ibm
power 5
service processor
remote code execution
cve-2012-4856
security vulnerability

CVSS2

7.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.029

Percentile

90.8%

JSON

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
ibmpower_5_system_firmwareRange≤sf240_418
OR
ibmpower_5_system_firmwareMatchsf240_201_201
OR
ibmpower_5_system_firmwareMatchsf240_202_201
OR
ibmpower_5_system_firmwareMatchsf240_219_201
OR
ibmpower_5_system_firmwareMatchsf240_222_201
OR
ibmpower_5_system_firmwareMatchsf240_233_201
OR
ibmpower_5_system_firmwareMatchsf240_258_201
OR
ibmpower_5_system_firmwareMatchsf240_259_201
OR
ibmpower_5_system_firmwareMatchsf240_261_201
OR
ibmpower_5_system_firmwareMatchsf240_284_201
OR
ibmpower_5_system_firmwareMatchsf240_298_201
OR
ibmpower_5_system_firmwareMatchsf240_299_201
OR
ibmpower_5_system_firmwareMatchsf240_320_201
OR
ibmpower_5_system_firmwareMatchsf240_332_201
OR
ibmpower_5_system_firmwareMatchsf240_338_201
OR
ibmpower_5_system_firmwareMatchsf240_358_201
OR
ibmpower_5_system_firmwareMatchsf240_371
OR
ibmpower_5_system_firmwareMatchsf240_382_382
OR
ibmpower_5_system_firmwareMatchsf240_403_382
OR
ibmpower_5_system_firmwareMatchsf240_415_382
OR
ibmpower_5_system_firmwareMatchsf240_417
AND
ibmpower_5Match9110-51a
OR
ibmpower_5Match9110-510
OR
ibmpower_5Match9111-285
OR
ibmpower_5Match9111-520
OR
ibmpower_5Match9113-550
OR
ibmpower_5Match9115-505
OR
ibmpower_5Match9116-561
OR
ibmpower_5Match9117-570
OR
ibmpower_5Match9118-575
OR
ibmpower_5Match9123-710
OR
ibmpower_5Match9124-720
OR
ibmpower_5Match9131-52a
OR
ibmpower_5Match9133-55a
OR
ibmpower_5Match9405-520
OR
ibmpower_5Match9406-520
OR
ibmpower_5Match9406-525
OR
ibmpower_5Match9406-550
OR
ibmpower_5Match9406-570
OR
ibmpower_5Match9407-515
VendorProductVersionCPE
ibmpower_5_system_firmware*cpe:2.3:o:ibm:power_5_system_firmware:*:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_201_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_201_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_202_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_202_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_219_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_219_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_222_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_222_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_233_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_233_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_258_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_258_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_259_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_259_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_261_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_261_201:*:*:*:*:*:*:*
ibmpower_5_system_firmwaresf240_284_201cpe:2.3:o:ibm:power_5_system_firmware:sf240_284_201:*:*:*:*:*:*:*
Rows per page:
1-10 of 401

Related

prion 1
cvelist 1
cert 1
nvd 1
prion
prion
Code injection
2012-12-20 12:02:00
cvelist
cvelist
CVE-2012-4856
2012-12-20 11:00:00
cert
cert
IBM Power 5 Service Processor privilege escalation vulnerability
2012-12-12 00:00:00
nvd
nvd
CVE-2012-4856
2012-12-20 12:02:18

CVSS2

7.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.029

Percentile

90.8%

JSON
Related for CVE-2012-4856
prion1cvelist1cert1nvd1