CVE-2016-0230

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

CVSS v3.0 6.8 MEDIUM
CVSS v2.0 7.2 HIGH

6.8^/10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387	Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html	Vendor Advisory
http://www.securityfocus.com/bid/91535	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:7.9.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3::::::

Configuration 2 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.1.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3::::::

Configuration 3 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.2.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2::::::

Configuration 4 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.3.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2::::::

Configuration 5 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:7.3.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7::::::

Configuration 6 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.4.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1::::::

Configuration 7 (hide)

cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*

Information

Published : 2016-07-07 07:59

Updated : 2020-12-09 06:33

NVD link : CVE-2016-0230

Mitre link : CVE-2016-0230

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Products Affected

ibm

hardware_management_console

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026", "name": "MB04026", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html", "name": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021", "name": "MB04021", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027", "name": "MB04027", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html", "name": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025", "name": "MB04025", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html", "name": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024", "name": "MB04024", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387", "name": "http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023", "name": "MB04023", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html", "name": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022", "name": "MB04022", "tags": ["Vendor Advisory"], "refsource": "AIXAPAR"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html", "name": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/91535", "name": "91535", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2016-0230", "ASSIGNER": "psirt@us.ibm.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}}, "publishedDate": "2016-07-07T14:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2020-12-09T14:33Z"}

6.8 /10