Remote Code Execution Vulnerability in IBM Power Service Processor
CVE-2012-4856

Currently unrated

Key Information:

Vendor

IBM
Status
Power 5 System Firmware
Power 5
Vendor
CVE Published:
20 December 2012

What is CVE-2012-4856?

The Service Processor component in IBM Power systems (specific models in the Power 5 series) is susceptible to a vulnerability where it fails to properly enforce the execution of firewall code. This flaw potentially allows remote attackers to execute arbitrary code through various vectors, thereby compromising the integrity and security of the affected systems.

References

http://aix.software.ibm.com/aix/efixes/security/squadrons...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/194604
third-party-advisoryx_refsource_CERT-VN
https://exchange.xforce.ibmcloud.com/vulnerabilities/79736
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.