PT-2014-3080 · Ibm · Ibm Power 7 Systems 760+2

Published 2014-08-22 · Updated 2017-08-29 · CVE-2013-6306

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Power 7 Systems 740 versions prior to 740.70 01Ax740 121 IBM Power 7 Systems 760 versions prior to 760.40 Ax760 078 IBM Power 7 Systems 770 versions prior to 770.30 01Ax770 062

Description The issue allows local users to gain Service Processor privileges via unknown vectors.

Recommendations For IBM Power 7 Systems 740 versions prior to 740.70 01Ax740 121, update to version 740.70 01Ax740 121 or later. For IBM Power 7 Systems 760 versions prior to 760.40 Ax760 078, update to version 760.40 Ax760 078 or later. For IBM Power 7 Systems 770 versions prior to 770.30 01Ax770 062, update to version 770.30 01Ax770 062 or later.

Fix

Related Identifiers

CVE-2013-6306

Affected Products

Ibm Power 7 Systems 740

Ibm Power 7 Systems 760

Ibm Power 7 Systems 770

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=isg3T1021104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6306 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88555 · Note