CVE-2012-2188

IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management…

published August 6, 2012

CVSS
—
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.0th percentile
Published
2012-08-06T16:00Z
EPSS history
Timeline
  • 06 AUG 16:00Z
    IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management…
    cvelistv5