CVE-2012-2188
High
Description
IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.
SeverityHigh
CVSS7.2
Exploit probability28. percentile0.3%
Product
Ibm Power Hardware Management Console Firmware
PublishedAug 6, 2012
First seenAug 6, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm power_hardware_management_console_firmware | 7r3.5.0, 7r7.1.0, 7r7.2.0, 7r7.3.0 | — |
| ibm systems_director_management__console_firmware | 6r7.3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.