Vulnerability in IBM Power 710
CVE-2013-6306
Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.003 (21.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 21st percentile — 21.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- IBM Power 710 — versions 8231-e1c, 8231-e1d, 8268-e1d
- IBM Power 720 — versions 8202-e4c, 8202-e4d
- IBM Power 730 — versions 8231-e2c, 8231-e2d
- IBM Power 740 — versions 8205-e6c, 8205-e6d
- IBM Power 740 Firmware — versions 740.00_01ax740_042_042, 740.10_01ax740_043_042, 740.15_01ax740_045_042
- IBM Power 750 — versions 8408-e8d
- IBM Power 760 — versions 9109-rmd
- IBM Power 760 Firmware — versions 760.00_ax760_034_034, 760.10_am760_044_034, 760.10_ax760_043_034
- IBM Power 770 — versions 9117-mmd, 9117-mmc
- IBM Power 770 Firmware — versions 770.00_01al770_032_032, 770.10_01ax770_038_032, 770.20_01ax770_048_032
References
- exchange.xforce.ibmcloud.com/vulnerabilities/88555 (vdb-entry)
- www-01.ibm.com/support/docview.wss (Vendor Advisory)