CVE-1999-1312 describes a local privilege escalation vulnerability affecting DEC OpenVMS VAX versions 5.5-2 through 5.0, and OpenVMS AXP version 1.0. This flaw allows local users to gain system privileges, posing a significant risk to the integrity and confidentiality of affected systems. With a CVSS score of 7.2 (HIGH), this vulnerability has a low attack complexity and requires local access, but an attacker can achieve complete compromise of confidentiality, integrity, and availability. Its EPSS score is very low, indicating minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor are there any known public exploit codes available in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered no community discussion or media coverage, suggesting a low profile and limited current threat landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:dec:dec_openvms_axp:1.0:*:*:*:*:*:*:* | ||
<= 5.5.2CPE matchmatch criteria | cpe:2.3:a:dec:dec_openvms_vax:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.