Is CVE-2012-4838 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in IBM Flex System Chassis Management Module

CVE-2012-4838

IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.

Published 2012-12-08 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 1.9 (Low). Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.004 (26.4th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 26th percentile — 26.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Public proof-of-concept exploits

abhav/nvd_

References

www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module… (Vendor Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/79020 (VDB Entry, Third Party Advisory, vdb-entry)
www-947.ibm.com/support/entry/myportal/docdisplay (Broken Link)

Frequently asked questions

What is CVE-2012-4838?: CVE-2012-4838 is a vulnerability in IBM Flex System Chassis Management Module. Published 2012-12-08.
Is CVE-2012-4838 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.