CVE:CVE-2012-2188
CNNVD:CNNVD-201208-013
IBM Power Hardware Management Console (HMC) SP4之前的7R3.5.0版本，7R7.1.0版本和7R7.2.0 SP3之前的7R7.2.0版本，SP2之前的7R7.3.0版本，IBM Systems Director Management Console (SDMC) SP2之前的6R7.3.0版本中存在漏洞，该漏洞源于未正确限制VIOS viosrvcmd命令。本地攻击者可利用该漏洞通过包含（1）$（美元符号）或（2）&符号字符的向量获取特权。
solution:Upgrade ibm power_hardware_management_console_firmware to a higher version than 7r3.5.0,7r7.1.0,7r7.2.0,7r7.3.0,and avoid the version 7r3.5.0,7r7.1.0,7r7.2.0,7r7.3.0; Upgrade ibm systems_director_management__console_firmware to a higher version than 6r7.3.0,and avoid the version 6r7.3.0