CVE-2016-0230 : IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

Published 2016-07-07 14:59:00

Updated 2020-12-09 14:33:10

Source IBM Corporation

View at NVD, CVE.org

Products affected by CVE-2016-0230

IBM » Hardware Management Console » Version: 7.9.0
cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.9.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.9.0 Update SP2
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.9.0 Update SP3
cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.1.0
cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.1.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.1.0 Update SP2
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.1.0 Update SP3
cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.2.0
cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.2.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.2.0 Update SP2
cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.3.0
cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.3.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.3.0 Update SP2
cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.3.0
cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.3.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.3.0 Update SP4
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.3.0 Update SP5
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 7.3.0 Update SP7
cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.4.0
cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.4.0 Update SP1
cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*
Matching versions
IBM » Hardware Management Console » Version: 8.5.0
cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-0230

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-0230

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-0230

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-0230

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387

IBM Security Bulletin: Vulnerabilities in IBM Power Hardware Management Console (CVE-2016-0230)
Patch;Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html

PTF MH01636 Readme
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html

404 Not Found
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024

IBM notice: The page you requested cannot be displayed
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021

IBM notice: The page you requested cannot be displayed
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022

IBM notice: The page you requested cannot be displayed
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html

404 Not Found
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html

404 Not Found
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html

PTF MH01638 Readme
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023

IBM notice: The page you requested cannot be displayed
Vendor Advisory
http://www.securityfocus.com/bid/91535

IBM Power Hardware Management CVE-2016-0230 Unspecified Local Privilege Escalation Vulnerability
Third Party Advisory;VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026

IBM notice: The page you requested cannot be displayed
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025

IBM notice: The page you requested cannot be displayed
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027

IBM notice: The page you requested cannot be displayed
Vendor Advisory

Jump to

Vulnerability Details : CVE-2016-0230

Products affected by CVE-2016-0230

Exploit prediction scoring system (EPSS) score for CVE-2016-0230

CVSS scores for CVE-2016-0230

CWE ids for CVE-2016-0230

References for CVE-2016-0230