PT-2009-3008 · Sun · Sun Fire X2200 M2+1

Published 2009-01-29 · Updated 2018-10-30 · CVE-2009-0345

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Fire X2100 M2 and X2200 M2 x86 platforms versions prior to SP/BMC firmware 3.20

Description The issue allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands.

Recommendations For Sun Fire X2100 M2 and X2200 M2 x86 platforms versions prior to SP/BMC firmware 3.20, update to SP/BMC firmware 3.20 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0345

Affected Products

Sun Fire X2100 M2

Sun Fire X2200 M2

References · 7

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0345 · Security Note
• http://securitytracker.com/id?1021646 · Note
• http://secunia.com/advisories/33726 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48329 · Note
• http://vupen.com/english/advisories/2009/0281 · Note
• http://securityfocus.com/bid/33506 · Note