CVE-2007-5717: Critical severity Sun Sun Fire vulnerability

Published Oct 30, 2007

Updated

Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor (SP) via unspecified vectors, a different vulnerability than CVE-2007-5170.

Affected Software

3 affected components

Sun Sun Fire=x2100m2-firmware_2.70

Sun Sun Fire=x2200m2-firmware_2.70

Sun Embedded Lights Out Manager

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103127-1

Event History

Oct 30, 2007

CVE Published

09:46 PM

Data Sourced

09:46 PM

DescriptionWeaknessAffected Software

Oct 31, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5717?

CVE-2007-5717 is considered a critical vulnerability as it allows remote attackers to execute arbitrary commands as root.

How do I fix CVE-2007-5717?

To remediate CVE-2007-5717, upgrade the firmware of the Sun Fire X2100 M2 and X2200 M2 to version 2.70 or later.

Which products are affected by CVE-2007-5717?

CVE-2007-5717 affects the Sun Fire X2100 M2 and X2200 M2 models running older firmware versions prior to 2.70.

Can CVE-2007-5717 be exploited remotely?

Yes, CVE-2007-5717 can be exploited remotely, allowing attackers to take control of the Service Processor.

What impact does CVE-2007-5717 have on system security?

The impact of CVE-2007-5717 includes the potential for unauthorized access and control of critical system components.