Vulnerabilities > SUN > Sparc Enterprise Server > m5000

DATE CVE VULNERABILITY TITLE RISK
2009-01-16 CVE-2009-0171 Permissions, Privileges, and Access Controls vulnerability in SUN Sparc Enterprise Server M4000/M5000
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact.
network
low complexity
sun CWE-264
critical
10.0
2007-12-15 CVE-2007-6360 Denial Of Service vulnerability in Sun SPARC XSCF Control Package (XCP) Firmware
Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.
network
low complexity
sun
7.8