Lucene search
HistoryApr 28, 2023 - 3:15 a.m.
CVE-2023-28528
ibm aix
vios
invscout command
arbitrary commands
non-privileged user
vulnerability
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.0%
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.
Affected configurations
Node
ibmviosMatch3.1
ORibmaixMatch7.1
ORibmaixMatch7.2
ORibmaixMatch7.3
Related
talos
talos
ibm
ibm
aix
aix
AIX is vulnerable to arbitrary command execution due to invscout
2023-04-12 12:32:10
cvelist
cvelist
CVE-2023-28528 IBM AIX command execution
2023-04-28 02:06:06
prion
prion
Design/Logic Flaw
2023-04-28 03:15:00
cve
cve
CVE-2023-28528
2023-04-28 03:15:08
zdt
zdt
IBM AIX 7.2 inscout Privilege Escalation Exploit
2023-05-19 00:00:00
packetstorm
packetstorm
IBM AIX 7.2 inscout Privilege Escalation
2023-05-18 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-05-19 18:44:30
talosblog
talosblog
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.0%
Related for NVD:CVE-2023-28528