Lucene search
HistoryDec 01, 2023 - 3:15 p.m.
CVE-2023-45168
ibm
aix
vios
vulnerability
local user
command execution
x-force id 267966
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966.
Affected configurations
Node
ibmviosMatch3.1
ORibmaixMatch7.2
ORibmaixMatch7.3
Related
cve
cve
CVE-2023-45168
2023-12-01 15:15:07
ibm
ibm
prion
prion
Design/Logic Flaw
2023-12-01 15:15:00
cvelist
cvelist
CVE-2023-45168 IBM AIX command execution
2023-12-01 14:10:24
aix
aix
AIX is vulnerable to arbitrary command execution due to invscout
2023-11-30 10:49:53
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-45168