PT-2012-5612 · Ibm · Ibm Power 5

Brian Smith · Published 2012-12-20 · Updated 2017-08-29 · CVE-2012-4856

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Power 5 versions 9100-### through 9400-### before SF240 418 382

Description The issue is related to the Service Processor in the IBM Power 5, which fails to ensure the execution of firewall code. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For versions prior to SF240 418 382, update to SF240 418 382 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-4856

Affected Products

Ibm Power 5

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-4856 · Security Note
• http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79736 · Note
• http://kb.cert.org/vuls/id/194604 · Note