CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
41.4%
The PowerVM Hypervisor could allow an attacker to obtain sensitive information if they gain service access to the HMC
CVEID:CVE-2023-25683
**DESCRIPTION:**IBM PowerVM Hypervisor could allow an attacker to obtain sensitive information if they gain service access to the HMC.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
This CVE only affects FSP-based systems. All eBMC-based are unaffected.
Affected Product(s) | Version(s) |
---|---|
PowerVM Hypervisor | FW1030.00 - FW1030.11 |
PowerVM Hypervisor | FW1010.00 - FW1010.40 |
PowerVM Hypervisor | FW950.00 - FW950.71 |
Customers with the products below should install FW950.80 (950_131) or newer to remediate this vulnerability.
Power 9
IBM Power System L922 (9008-22L)
IBM Power System S922 (9009-22A, 9009-22G)
IBM Power System H922 (9223-22H, 9223-22S)
IBM Power System S914 (9009-41A, 9009-41G)
IBM Power System S924 (9009-42A, 9009-42G)
IBM Power System H924 (9223-42H, 9223-42S)
IBM Power System E950 (9040-MR9)
IBM Power System E980 (9080-M9S)
Customers with the products below should install FW1010.51(1010_163), FW1030.20(1030_058) or newer to remediate this vulnerability.
Power 10
None
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
41.4%