What is the CVSS score of CVE-2012-3128?

CVE-2012-3128 has a CVSS 2.0 base score of 3.7 (Low). CVSS vector: AV:L/AC:H/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.1%.

Sparc T Series Server Firmware CVE-2012-3128

LOW

2012-07-17 secalert_us@oracle.com

Information Disclosure Oracle Sparc T Series Server Firmware Netra Sparc T3 1 Netra Sparc T3 1B Netra Sparc T4 1 Netra Sparc T4 1B Netra Sparc T4 2 Sparc T3 1 Sparc T3 1B Sparc T3 2 Sparc T3 4 Sparc T4 1 Sparc T4 1B Sparc T4 2 Sparc T4 4

3.7

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.7 LOW

AV:L/AC:H/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:P/I:P/A:P

Attack Vector

Local

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jul 17, 2012 - 23:55 cve.org

LOW 3.7

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Unspecified vulnerability in Oracle SPARC T-Series Servers running System Firmware 8.2.0 and 8.1.4.e or earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Integrated Lights Out Manager. Affected products include: Oracle Sparc T-Series Server Firmware, Oracle Netra Sparc T3-1, Oracle Netra Sparc T3-1B, Oracle Netra Sparc T4-1, Oracle Netra Sparc T4-1B.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.