[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04822249 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04822249 Version: 1 HPSBST03502 rev.1 - HP 3PAR Service Processor SP SPOCC, Remot...

CVE-2015-5443: Exposure of Sensitive Information to an Unauthorized Actor

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

HP 3PAR Service Processor SPOCC information disclosure

No description provided...

PT-2015-6915

Name of the Vulnerable Software and Affected Versions HP 3PAR Service Processor SP versions 4.2.0.GA-29 through 4.3.0.GA-17 HP 3PAR Service Processor SP version 4.3.0-GA-24 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors...

Cisco ASR 1000 Series Router IP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP v4 and IPv6 messages that allows a remote attacker to...

CVE-2013-6306

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

Code injection

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2013-6306

CVE-2013-6306 concerns IBM Power 7 Systems (740 before 740.70 01Ax740_121; 760 before 760.40 Ax760_078; 770 before 770.30 01Ax770_062). The vulnerability allows local users to gain Service Processor privileges via unknown vectors. No root-cause, vector, or remediation details are provided beyond ...

CVE-2013-6306

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

CVE-2013-6306: Undefined Security Weakness

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740121, 760 before 760.40 Ax760078, and 770 before 770.30 01Ax770062 allows local users to gain Service Processor privileges via unknown vectors...

PT-2014-3080

Name of the Vulnerable Software and Affected Versions IBM Power 7 Systems 740 versions prior to 740.70 01Ax740 121 IBM Power 7 Systems 760 versions prior to 760.40 Ax760 078 IBM Power 7 Systems 770 versions prior to 770.30 01Ax770 062 Description The issue allows local users to gain Service...

CVE-2012-4856

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4856

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4856

The CVE-2012-4856 vulnerability affects the IBM Power 5 Service Processor (multiple MTMs listed in vendor advisories) where the firewall code is not executed in certain network configurations, enabling remote attackers to execute arbitrary code. The underlying issue is the Service Processor faili...

PT-2012-5612

Name of the Vulnerable Software and Affected Versions IBM Power 5 versions 9100- through 9400- before SF240 418 382 Description The issue is related to the Service Processor in the IBM Power 5, which fails to ensure the execution of firewall code. This allows remote attackers to execute arbitrary...

CVE-2012-4856: Undefined Security Weakness

The Service Processor in the IBM Power 5 91- and 940- before SF240418382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors...

IBM Power 5 Service Processor privilege escalation vulnerability

Overview IBM Power 5 Service Processor contain a vulnerability which could allow an attacker to operate with elevated privileges. Description IBM's security advisory states, "A security issue has been identified on IBM Power 5 Systems such that the firewall code does not get executed in certain...

CVE-2009-0171

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...

CVE-2009-0171

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...