Lucene search

K
cve[email protected]CVE-2023-25683
HistoryJun 15, 2023 - 1:15 a.m.

CVE-2023-25683

2023-06-1501:15:10
CWE-200
web.nvd.nist.gov
24
ibm
powervm
hypervisor
fw
firmware
security
vulnerability
information
cve-2023-25683
ibm x-force id
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.

Affected configurations

Vulners
NVD
Node
ibmpowervm_hypervisorRangeFW950.00FW950.71
OR
ibmpowervm_hypervisorRangeFW1010.00FW1010.40
OR
ibmpowervm_hypervisorRangeFW1020.00FW1020.20
OR
ibmpowervm_hypervisorRangeFW1030.00FW1030.11
VendorProductVersionCPE
ibmpowervm_hypervisor*cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
ibmpowervm_hypervisor*cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
ibmpowervm_hypervisor*cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
ibmpowervm_hypervisor*cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerVM Hypervisor",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "FW950.71",
        "status": "affected",
        "version": "FW950.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1010.40",
        "status": "affected",
        "version": "FW1010.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1020.20",
        "status": "affected",
        "version": "FW1020.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1030.11",
        "status": "affected",
        "version": "FW1030.00",
        "versionType": "semver"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

Related for CVE-2023-25683