CVE-2016-0230

MEDIUM

IBM Power HMC <8.5.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

References (14)

Core 14
Core References
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/91535

Scores

CVSS v3 6.8
EPSS 0.0044
EPSS Percentile 35.6%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (7)
ibm/hardware_management_console 7.9.0 (4 CPE variants)
ibm/hardware_management_console 8.1.0 (4 CPE variants)
ibm/hardware_management_console 8.2.0 (3 CPE variants)
ibm/hardware_management_console 8.3.0 (3 CPE variants)
ibm/hardware_management_console 7.3.0 (5 CPE variants)
ibm/hardware_management_console 8.4.0 (2 CPE variants)
ibm/hardware_management_console 8.5.0
Published Jul 07, 2016
Tracked Since Feb 18, 2026