Read the docs
TI-2012-04101 Aliases CVE-2012-4856GHSA-24q6-6vv9-w6vj

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does…

Priority LOW 37CWE-255Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

Why it matters now

EPSS 0.01172 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:o:ibm:power_5_system_firmware:*:*:*:*:*:*:*:*up to sf240_418VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_201_201:*:*:*:*:*:*:*sf240_201_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_202_201:*:*:*:*:*:*:*sf240_202_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_219_201:*:*:*:*:*:*:*sf240_219_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_222_201:*:*:*:*:*:*:*sf240_222_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_233_201:*:*:*:*:*:*:*sf240_233_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_258_201:*:*:*:*:*:*:*sf240_258_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_259_201:*:*:*:*:*:*:*sf240_259_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_261_201:*:*:*:*:*:*:*sf240_261_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_284_201:*:*:*:*:*:*:*sf240_284_201VulnerableIBM
  • cpe:2.3:o:ibm:power_5_system_firmware:*:*:*:*:*:*:*:* Versions up to sf240_418 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_201_201:*:*:*:*:*:*:* Versions sf240_201_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_202_201:*:*:*:*:*:*:* Versions sf240_202_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_219_201:*:*:*:*:*:*:* Versions sf240_219_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_222_201:*:*:*:*:*:*:* Versions sf240_222_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_233_201:*:*:*:*:*:*:* Versions sf240_233_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_258_201:*:*:*:*:*:*:* Versions sf240_258_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_259_201:*:*:*:*:*:*:* Versions sf240_259_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_261_201:*:*:*:*:*:*:* Versions sf240_261_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_284_201:*:*:*:*:*:*:* Versions sf240_284_201 Vulnerable ·IBM
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:ibm:power_5_system_firmware:sf240_298_201:*:*:*:*:*:*:*sf240_298_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_299_201:*:*:*:*:*:*:*sf240_299_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_320_201:*:*:*:*:*:*:*sf240_320_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_332_201:*:*:*:*:*:*:*sf240_332_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_338_201:*:*:*:*:*:*:*sf240_338_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_358_201:*:*:*:*:*:*:*sf240_358_201VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_371:*:*:*:*:*:*:*sf240_371VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_382_382:*:*:*:*:*:*:*sf240_382_382VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_403_382:*:*:*:*:*:*:*sf240_403_382VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_415_382:*:*:*:*:*:*:*sf240_415_382VulnerableIBM
cpe:2.3:o:ibm:power_5_system_firmware:sf240_417:*:*:*:*:*:*:*sf240_417VulnerableIBM
cpe:2.3:h:ibm:power_5:9110-51a:*:*:*:*:*:*:*9110-51aVulnerableIBM
cpe:2.3:h:ibm:power_5:9110-510:*:*:*:*:*:*:*9110-510VulnerableIBM
cpe:2.3:h:ibm:power_5:9111-285:*:*:*:*:*:*:*9111-285VulnerableIBM
cpe:2.3:h:ibm:power_5:9111-520:*:*:*:*:*:*:*9111-520VulnerableIBM
cpe:2.3:h:ibm:power_5:9113-550:*:*:*:*:*:*:*9113-550VulnerableIBM
cpe:2.3:h:ibm:power_5:9115-505:*:*:*:*:*:*:*9115-505VulnerableIBM
cpe:2.3:h:ibm:power_5:9116-561:*:*:*:*:*:*:*9116-561VulnerableIBM
cpe:2.3:h:ibm:power_5:9117-570:*:*:*:*:*:*:*9117-570VulnerableIBM
cpe:2.3:h:ibm:power_5:9118-575:*:*:*:*:*:*:*9118-575VulnerableIBM
cpe:2.3:h:ibm:power_5:9123-710:*:*:*:*:*:*:*9123-710VulnerableIBM
cpe:2.3:h:ibm:power_5:9124-720:*:*:*:*:*:*:*9124-720VulnerableIBM
cpe:2.3:h:ibm:power_5:9131-52a:*:*:*:*:*:*:*9131-52aVulnerableIBM
cpe:2.3:h:ibm:power_5:9133-55a:*:*:*:*:*:*:*9133-55aVulnerableIBM
cpe:2.3:h:ibm:power_5:9405-520:*:*:*:*:*:*:*9405-520VulnerableIBM
cpe:2.3:h:ibm:power_5:9406-520:*:*:*:*:*:*:*9406-520VulnerableIBM
cpe:2.3:h:ibm:power_5:9406-525:*:*:*:*:*:*:*9406-525VulnerableIBM
cpe:2.3:h:ibm:power_5:9406-550:*:*:*:*:*:*:*9406-550VulnerableIBM
cpe:2.3:h:ibm:power_5:9406-570:*:*:*:*:*:*:*9406-570VulnerableIBM
cpe:2.3:h:ibm:power_5:9407-515:*:*:*:*:*:*:*9407-515VulnerableIBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_298_201:*:*:*:*:*:*:* Versions sf240_298_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_299_201:*:*:*:*:*:*:* Versions sf240_299_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_320_201:*:*:*:*:*:*:* Versions sf240_320_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_332_201:*:*:*:*:*:*:* Versions sf240_332_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_338_201:*:*:*:*:*:*:* Versions sf240_338_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_358_201:*:*:*:*:*:*:* Versions sf240_358_201 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_371:*:*:*:*:*:*:* Versions sf240_371 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_382_382:*:*:*:*:*:*:* Versions sf240_382_382 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_403_382:*:*:*:*:*:*:* Versions sf240_403_382 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_415_382:*:*:*:*:*:*:* Versions sf240_415_382 Vulnerable ·IBM
  • cpe:2.3:o:ibm:power_5_system_firmware:sf240_417:*:*:*:*:*:*:* Versions sf240_417 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9110-51a:*:*:*:*:*:*:* Versions 9110-51a Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9110-510:*:*:*:*:*:*:* Versions 9110-510 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9111-285:*:*:*:*:*:*:* Versions 9111-285 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9111-520:*:*:*:*:*:*:* Versions 9111-520 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9113-550:*:*:*:*:*:*:* Versions 9113-550 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9115-505:*:*:*:*:*:*:* Versions 9115-505 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9116-561:*:*:*:*:*:*:* Versions 9116-561 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9117-570:*:*:*:*:*:*:* Versions 9117-570 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9118-575:*:*:*:*:*:*:* Versions 9118-575 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9123-710:*:*:*:*:*:*:* Versions 9123-710 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9124-720:*:*:*:*:*:*:* Versions 9124-720 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9131-52a:*:*:*:*:*:*:* Versions 9131-52a Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9133-55a:*:*:*:*:*:*:* Versions 9133-55a Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9405-520:*:*:*:*:*:*:* Versions 9405-520 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9406-520:*:*:*:*:*:*:* Versions 9406-520 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9406-525:*:*:*:*:*:*:* Versions 9406-525 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9406-550:*:*:*:*:*:*:* Versions 9406-550 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9406-570:*:*:*:*:*:*:* Versions 9406-570 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_5:9407-515:*:*:*:*:*:*:* Versions 9407-515 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4856
  2. 2026-10-03 Alias added: GHSA-24q6-6vv9-w6vj

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences