← Vulnerability feed

Vulnerability record · CVE-2012-2010 · published 18 May 2012

CVE-2012-2010: Hp openvms permissions and access controls vulnerability

Hp · Openvms

The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.

6.9 CVSS 2.0 Medium EPSS 0.39% · top 69.4% CWE-264 · Permissions and access controls
6.9CVSS 2.0 base score
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.

AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/82015
http://www.securityfocus.com/bid/53613
http://www.securitytracker.com/id?1027074
https://exchange.xforce.ibmcloud.com/vulnerabilities/75729
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494
http://osvdb.org/82015
http://www.securityfocus.com/bid/53613
http://www.securitytracker.com/id?1027074
https://exchange.xforce.ibmcloud.com/vulnerabilities/75729
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494

Track CVE-2012-2010 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5120Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbit…EPSS 9.9%7.8CVE-2017-17482Hp openvms memory buffer overflow vulnerabilityAn issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table m…EPSS 0.64%7.5CVE-2007-0139Hp openvms vulnerabilityUnspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 f…EPSS 2.2%7.2CVE-2008-4052Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local…EPSS 0.48%7.2CVE-2008-3947Hp openvms improper input validation vulnerabilityDCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.EPSS 0.44%6.8CVE-2010-1973Hp openvms vulnerabilityUnspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and ea…EPSS 0.28%5.7CVE-2010-4110Hp openvms vulnerabilityUnspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or c…EPSS 0.28%5.0CVE-2012-3277Hp openvms vulnerabilityHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2012-2010), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.