CVE-2009-0171: Sun Sparc Enterprise Server

High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days.

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact.

Affected products

• Sun Sparc Enterprise Server: version m4000 only; version m5000 only

Published 2009-01-16. Last modified 2026-06-16.