CRITICAL🇵🇱 Wersja polska

CVE-2021-38917

CVSS 9.1v3.1pub. 2021-12-10upd. 2024-11-21

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • IBM Powervm Hypervisor

    OS
    Ibm
    fw860fw940fw950
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-30438CRITICAL9.3PL ✓same product

IBM PowerVM: przełamanie izolacji partycji logicznych na Power9/Power10

CVE-2021-38923CRITICAL9.1PL ✓same product

IBM PowerVM Hypervisor: ucieczka z VM przez zduplikowane WWPNy

CVE-2021-38918HIGH7.5same product

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operation...

CVE-2025-36238MEDIUM6.0same product

Hyperwisor IBM PowerVM FW1110.00 do FW1110.03, FW1060.00 do FW1060.51 oraz FW950.00 do FW950.F0 może pozwolić ...

CVE-2025-36035MEDIUM6.7same product

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40...