Code injection

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

HP 3PAR Service Processor Information Disclosure Vulnerability

HP 3PAR Service Processor SP is optional software in a suite of HP 3PAR storage solutions from Hewlett-Packard HP in the United States. A security vulnerability exists in HP 3PAR SP. A remote attacker could exploit the vulnerability to obtain sensitive information...

CVE-2015-5443

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

Information disclosure

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-5443

The CVE-2015-5443 entry concerns HP 3PAR Service Processor SPOCC, where remote authenticated users could obtain sensitive information. Affected SPOCC versions are SP 4.2.0.GA-29 (GA), SP 4.3.0.GA-17 (GA), and SP 4.3.0-GA-24 (MU1). The vulnerability is described as an information disclosure with u...

CVE-2015-5443

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04822249 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04822249 Version: 1 HPSBST03502 rev.1 - HP 3PAR Service Processor SP SPOCC, Remot...

HP 3PAR Service Processor SPOCC information disclosure

No description provided...

Cisco ASR 1000 Series Router IP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP v4 and IPv6 messages that allows a remote attacker to...

CVE-2013-6306

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

Code injection

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2013-6306

CVE-2013-6306 concerns IBM Power 7 Systems (740 before 740.70 01Ax740_121; 760 before 760.40 Ax760_078; 770 before 770.30 01Ax770_062). The vulnerability allows local users to gain Service Processor privileges via unknown vectors. No root-cause, vector, or remediation details are provided beyond ...

CVE-2013-6306

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2012-4856

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4856

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4856

The CVE-2012-4856 vulnerability affects the IBM Power 5 Service Processor (multiple MTMs listed in vendor advisories) where the firewall code is not executed in certain network configurations, enabling remote attackers to execute arbitrary code. The underlying issue is the Service Processor faili...

IBM Power 5 Service Processor privilege escalation vulnerability

Overview IBM Power 5 Service Processor contain a vulnerability which could allow an attacker to operate with elevated privileges. Description IBM's security advisory states, "A security issue has been identified on IBM Power 5 Systems such that the firewall code does not get executed in certain...

CVE-2009-0171

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...