Lucene search
IbmCVELIST:CVE-2023-45168HistoryDec 01, 2023 - 2:10 p.m.
CVE-2023-45168 IBM AIX command execution
2023-12-0114:10:24
CWE-119
ibm
www.cve.org
ibm aix
vulnerability
invscout command
command execution
non-privileged user
ibm x-force id
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "AIX",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.2, 7.3, VIOS 3.1"
}
]
}
]Related
cve
cve
CVE-2023-45168
2023-12-01 15:15:07
ibm
ibm
prion
prion
Design/Logic Flaw
2023-12-01 15:15:00
aix
aix
AIX is vulnerable to arbitrary command execution due to invscout
2023-11-30 10:49:53
nvd
nvd
CVE-2023-45168
2023-12-01 15:15:07
8.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVELIST:CVE-2023-45168