What is the CVSS score of CVE-2013-6306?

CVE-2013-6306 has a CVSS 2.0 base score of 4.6 (Medium). CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.1%.

Power 760 Firmware CVE-2013-6306

MEDIUM

2014-08-22 psirt@us.ibm.com

IBM Information Disclosure Power 760 Firmware Power 770 Power 780 Power 795 Power Ese Power 740 Firmware Power 710 Power 720 Power 730 Power 740 Power 770 Firmware Power 750 Power 760 Powerlinux 7R1 Powerlinux 7R2

4.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.6 MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:P/I:P/A:P

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 22, 2014 - 17:55 cve.org

MEDIUM 4.6

DescriptionCVE.org

AnalysisAI

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges. Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors. Affected products include: Ibm Power 760 Firmware, Ibm Power 770, Ibm Power 780, Ibm Power 795, Ibm Power Ese. Version information: before 740.70.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.