GCVE-110-CERTCC-2019-597809

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published February 12, 2020

IBM ServeRAID Manager version 9.30-17006 and prior exposes a Java RMI that allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report1

certcc-cvss-temporal-env

temporal_score9.5remediation_levelUreport_confidenceCenvironmental_score2.373692496target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

References

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

url

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

url

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

url

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON