Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2015-0137
  • Ibm » Powervc » Version: 1.2.0.0
    cpe:2.3:a:ibm:powervc:1.2.0.0
  • Ibm » Powervc » Version: 1.2.0.1
    cpe:2.3:a:ibm:powervc:1.2.0.1
  • Ibm » Powervc » Version: 1.2.0.2
    cpe:2.3:a:ibm:powervc:1.2.0.2
  • Ibm » Powervc » Version: 1.2.0.3
    cpe:2.3:a:ibm:powervc:1.2.0.3
  • Ibm » Powervc » Version: 1.2.1.0
    cpe:2.3:a:ibm:powervc:1.2.1.0
  • Ibm » Powervc » Version: 1.2.1.1
    cpe:2.3:a:ibm:powervc:1.2.1.1


Contact Us

Shodan ® - All rights reserved