CVE-2017-1635

high-risk

Published 2017-12-13

IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.

Do I need to act?

18.2% chance of exploitation in next 30 days

EPSS score — higher than 82% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.0/10 High

ADJACENT_NETWORK / LOW complexity

Affected Products (9)

Tivoli Monitoring

Affected Vendors

Ibm

References (6)

Issue Tracking http://www.ibm.com/support/docview.wss?uid=swg22010554

Third Party Advisory http://www.securityfocus.com/bid/101905

Issue Tracking https://exchange.xforce.ibmcloud.com/vulnerabilities/133243

Issue Tracking http://www.ibm.com/support/docview.wss?uid=swg22010554

Third Party Advisory http://www.securityfocus.com/bid/101905

Issue Tracking https://exchange.xforce.ibmcloud.com/vulnerabilities/133243

/ 100

high-risk

Severity 25/34 · High

Exploitability 13/34 · Low

Exposure 15/34 · Moderate