CVE-2015-0137

EUVD-2015-0175
IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
ibmpowervc
1.2.0.0
ibmpowervc
1.2.0.1
ibmpowervc
1.2.0.2
ibmpowervc
1.2.0.3
ibmpowervc
1.2.1.0
ibmpowervc
1.2.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020611
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020611