CVE-2016-0230

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-0230
IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387 Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027 Vendor Advisory
http://www.securityfocus.com/bid/91535 Third Party Advisory VDB Entry
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*
History

No history.

Information

Published : 2016-07-07 14:59

Updated : 2024-02-04 18:53

NVD link : CVE-2016-0230

Mitre link : CVE-2016-0230

CVE.ORG link : CVE-2016-0230

JSON object : View

Products Affected

ibm

  • hardware_management_console
CWE
CWE-264

Permissions, Privileges, and Access Controls