CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2009-0171
https://notcve.org/view.php?id=CVE-2009-0171
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact. Los servidores Sun SPARC Enterprise M4000 y M5000, dentro de un cierto rango de números de serie, permite a los atacantes remotos utilizar la contraseña root de fabricación, realizar un inicio de sesión root en eXtended System Control Facility Unit (también se conoce como XSCFU o procesador de servicios), y tener otro impacto no especificado. • http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1 http://www.securityfocus.com/bid/33280 http://www.securitytracker.com/id?1021602 http://www.vupen.com/english/advisories/2009/0207 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 7%CPEs: 5EXPL: 0CVE-2007-6360
https://notcve.org/view.php?id=CVE-2007-6360
Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion. Vulnerabilidad no especificada en Sun eXtended System Control Facility (XSCF) Control Package (XCP) versiones anteriores de firmware a 1050 de servidores SPARC Enterprise M4000, M5000, M8000, y M9000 permite a atacantes remotos provocar una denegación de servicio (reinicio) mediante tráfico de red (1) telnet, (2) ssh, ó (3) http que dispara agotamiento de memoria. • http://osvdb.org/40842 http://osvdb.org/40843 http://osvdb.org/40844 http://secunia.com/advisories/27926 http://securitytracker.com/id?1019048 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103159-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201333-1 http://www.securityfocus.com/bid/26712 http://www.vupen.com/english/advisories/2007/4098 https://exchange.xforce.ibmcloud.com/vulnerabilities/38860 •