7.2
CVE-2012-2188
- EPSS 0.06%
- Veröffentlicht 06.08.2012 16:55:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Power Hardware Management Console Firmware Version7r3.5.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.1.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.2.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.3.0
Ibm ≫ Systems Director Management Console Firmware Version6r7.3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.139 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|