VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 6, 2012· Updated Apr 29, 2026

CVE-2012-2188

CVE-2012-2188

Description

IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Power Hardware Management Console Firmware4 versions
    cpe:2.3:o:ibm:power_hardware_management_console_firmware:7r3.5.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:ibm:power_hardware_management_console_firmware:7r3.5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:power_hardware_management_console_firmware:7r7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:power_hardware_management_console_firmware:7r7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:power_hardware_management_console_firmware:7r7.3.0:*:*:*:*:*:*:*
  • IBM/Systems Director Management Console (SDMC)2 versions
    cpe:2.3:o:ibm:systems_director_management__console_firmware:6r7.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:ibm:systems_director_management__console_firmware:6r7.3.0:*:*:*:*:*:*:*
    • (no CPE)range: 6R7.3.0 before SP2
  • IBM/Power Hardware Management Consolellm-fuzzy
    Range: 7R3.5.0 before SP4, 7R7.1.0/7R7.2.0 before 7R7.2.0 SP3, 7R7.3.0 before SP2

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

6

News mentions

0

No linked articles in our index yet.