Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2012-4856

Published: Dec 20, 2012 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.9 HIGH
AV:A/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-4856
CWEhttps://cwe.mitre.org/data/definitions/255.html

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Power_5_system_firmware Ibm * sf240_418
Power_5_system_firmware Ibm sf240_201_201 sf240_201_201
Power_5_system_firmware Ibm sf240_202_201 sf240_202_201
Power_5_system_firmware Ibm sf240_219_201 sf240_219_201
Power_5_system_firmware Ibm sf240_222_201 sf240_222_201
Power_5_system_firmware Ibm sf240_233_201 sf240_233_201
Power_5_system_firmware Ibm sf240_258_201 sf240_258_201
Power_5_system_firmware Ibm sf240_259_201 sf240_259_201
Power_5_system_firmware Ibm sf240_261_201 sf240_261_201
Power_5_system_firmware Ibm sf240_284_201 sf240_284_201
Power_5_system_firmware Ibm sf240_298_201 sf240_298_201
Power_5_system_firmware Ibm sf240_299_201 sf240_299_201
Power_5_system_firmware Ibm sf240_320_201 sf240_320_201
Power_5_system_firmware Ibm sf240_332_201 sf240_332_201
Power_5_system_firmware Ibm sf240_338_201 sf240_338_201
Power_5_system_firmware Ibm sf240_358_201 sf240_358_201
Power_5_system_firmware Ibm sf240_371 sf240_371
Power_5_system_firmware Ibm sf240_382_382 sf240_382_382
Power_5_system_firmware Ibm sf240_403_382 sf240_403_382
Power_5_system_firmware Ibm sf240_415_382 sf240_415_382
Power_5_system_firmware Ibm sf240_417 sf240_417

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use