232 matches found
CVE-2022-22309
The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095...
IBM i Information Disclosure Vulnerability
IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i 7.1, 7.2, 7.3 and 7.4 Extended Dynamic Remote SQL server EDRSQL has a security vulnerability that could be exploited by an attacker to send specially designed requests to a remotely...
IBM i 安全漏洞
IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i 7.1, 7.2, 7.3 and 7.4 Extended Dynamic Remote SQL server EDRSQL has a security vulnerability that could be exploited by an attacker to send specially designed requests to a remotely...
IBM i2 Analyst s Notebook Buffer Overflow Vulnerability
IBM i2 Analyst s Notebook is a set of operating systems from IBM running in IBM Power Systems and IBM PureSystems. i2 Analyst s Notebook is vulnerable to a buffer overflow vulnerability, which can be exploited by local attackers to overflow the buffer and gain lower-level privileges...
IBM i Buffer Overflow Vulnerability
IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i has a buffer error vulnerability that stems from incorrect software boundary checking, making the software vulnerable to stack-based buffer overflow attacks, which could be exploited by a loca...
Security Bulletin: The PowerVM hypervisor can allow an attacker that gains service access to the FSP to read and write system memory
Summary On PowerVM systems an attacker that gains service access to the FSP can read and write system memory through a series of carefully crafted service procedures Vulnerability Details CVEID: CVE-2021-38917 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker that gains service access t...
Security Bulletin: This Power System update is being released to address CVE-2018-5391
Summary POWER9: In response to a denial of service vulnerability, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-5391. A remote attacker could use large IP frames to trigger time and calculation expensive calls in the...
Security Bulletin: This Power System update is being released to address CVE-2018-5390
Summary POWER9: In response to a denial of service vulnerability, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-5390. Vulnerability Details CVEID: CVE-2018-5390 DESCRIPTION: Linux Kernel is vulnerable to a denial of...
Security Bulletin: This Power System update is being released to address CVE-2018-0732
Summary POWER9: In response to a denial of service vulnerability in OpenSSL, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-0732. A malicious server can send a large prime value to a client during DHE TLS handshake causi...
Security Bulletin: Power Systems Firmware is affected by vulnerability in OpenSSL (CVE-2014-0160)
Summary OpenSSL Heartbleed Vulnerability - April 2014 Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability to expose...
CVE-2021-29765
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
IBM PowerVM Hypervisor 授权问题漏洞
IBM PowerVM Hypervisor is an application from Universal Business Machines IBM, Inc. provides a secure and scalable virtualized environment for applications built on the advanced RAS features and leading performance of the Power Systems platform. An authorization issue vulnerability exists in IBM...
IBM i 资源管理错误漏洞
IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...
Security Bulletin: Power Systems Firmware is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224)
Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...
Siemens SIPROTEC 5 7SK85 Power Systems Monitoring and Protection Device
Binary data 765254.prm...
Siemens SIPROTEC 5 7UT82 Power Systems Monitoring and Protection Device
Binary data 765260.prm...
Siemens SIPROTEC 5 7SD87 Power Systems Monitoring and Protection Device
Binary data 765249.prm...
Siemens SIPROTEC 5 7KE85 Power Systems Monitoring and Protection Device
Binary data 765243.prm...