CVE-2022-36768 — Vulnetix

CVE-2022-36768 PUBLISHED CVSS 8.399999618530273 HIGH

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.

EPSS 0.05% · 15.4th percentile

Risk Scores

CVSS 3.0

8.399999618530273

CVSS:3.0/A:H/C:H/I:H/AC:L/S:U/PR:N/UI:N/AV:L/RL:O/E:U/RC:C

EPSS Score

0.05%

15.4th percentile

Affected Products

Vendor	Product	Versions
IBM	AIX	7.1, 7.3, 7.2
ibm	vios	3.1
IBM	VIOS	3.1
ibm	aix	7.1, 7.3, 7.2

Exploit Intelligence

https://www.ibm.com/support/pages/node/6619725 (circl)
ibm-aix-cve202236768-priv-escalation (232014) (circl)

Timeline

Sep 13, 2022 CVE Published
Sep 14, 2022 EPSS Score
Oct 29, 2022 EPSS Score
Dec 13, 2022 EPSS Score
Jan 27, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 13, 2023 EPSS Score
Apr 27, 2023 EPSS Score
Jun 11, 2023 EPSS Score
Jul 26, 2023 EPSS Score
Sep 9, 2023 EPSS Score
Oct 24, 2023 EPSS Score

References

https://www.ibm.com/support/pages/node/6619725 url
ibm-aix-cve202236768-priv-escalation (232014) vdb
https://www.ibm.com/support/pages/node/6619843 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-36768 advisory

Open in Interactive Console →