Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.
https://exchange.xforce.ibmcloud.com/vulnerabilities/35995
http://www.securityfocus.com/archive/1/476285/100/0/threaded