VulnerabilityModified
CVE-2016-0230
IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access…
MEDIUM 6.8EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/hardware management console
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027Vendor Advisory
- http://www.securityfocus.com/bid/91535Third Party Advisory, VDB Entry
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.htmlVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027Vendor Advisory
- http://www.securityfocus.com/bid/91535Third Party Advisory, VDB Entry
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.htmlVendor Advisory
- https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.