CVE-2012-2010

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-18 · updated 2026-06-16
Weakness: CWE-264

Description

The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.

Affected products

HP Openvms: 8.3, 8.3-1h1, 8.4

References

http://osvdb.org/82015
http://www.securityfocus.com/bid/53613
http://www.securitytracker.com/id?1027074
https://exchange.xforce.ibmcloud.com/vulnerabilities/75729
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494
http://osvdb.org/82015
http://www.securityfocus.com/bid/53613
http://www.securitytracker.com/id?1027074
https://exchange.xforce.ibmcloud.com/vulnerabilities/75729
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494

Get alerted when CVE-2012-2010 or the next vulnerability affects your stack