Lucene search

IbmCVE-2022-22445

HistoryJul 18, 2022 - 6:15 p.m.

CVE-2022-22445

2022-07-1818:15:08

ibm

web.nvd.nist.gov

cve-2022-22445

fsp

power9

firmware compromise

admin authority

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

19.6%

JSON

An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.

Affected configurations

Nvd

Vulners

Node

ibmpowervm_hypervisorRangefw950–fw950.40

ibmpowervm_hypervisorRangefw1010–fw1010.32

VendorProductVersionCPE
ibmpowervm_hypervisor*cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	powervm_hypervisor	*	cpe:2.3:o:ibm:powervm_hypervisor::::::::

CNA Affected

[
  {
    "product": "PowerVM Hypervisor",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "FW1010"
      },
      {
        "status": "affected",
        "version": "FW950"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/224546

www.ibm.com/support/pages/node/6604071

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

19.6%

JSON

Related for CVE-2022-22445