7.2
CVE-2012-2188
- EPSS 0.06%
- Published 06.08.2012 16:55:03
- Last modified 11.04.2025 00:51:21
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Power Hardware Management Console Firmware Version7r3.5.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.1.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.2.0
Ibm ≫ Power Hardware Management Console Firmware Version7r7.3.0
Ibm ≫ Systems Director Management Console Firmware Version6r7.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.139 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|