CVE-2012-2188

published 2012-08-06

CVE-2012-2188: IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management…

Priority P4 28 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	power_hardware_management_console_firmware	—	—
ibm	power_hardware_management_console_firmware	—	—
ibm	power_hardware_management_console_firmware	—	—
ibm	power_hardware_management_console_firmware	—	—
ibm	systems_director_management_console_firmware	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264