SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-3838

Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5 allows local users to affect…

MEDIUM 4.0EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5 allows local users to affect availability via unknown vectors related to Sun System Firmware/Hypervisor.

CVSS 2.0
4.0 MEDIUMAV:L/AC:H/Au:N/C:N/I:N/A:C
EPSS
0.27% probability · 20th percentile
CISA KEV
Not listed
Affected
oracle/sun system firmware · oracle/sparc enterprise m8000 server · oracle/sparc enterprise m9000 server · oracle/sparc t3-1 · oracle/sparc t3-1b · oracle/sparc t3-2 · oracle/sparc t3-3 · oracle/sparc t3-4 · oracle/sparc t4-1 · oracle/sparc t4-1b · oracle/sparc t4-2 · oracle/sparc t4-4
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.