CVE-2023-25683

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.

CVSS v3.0 7.5 HIGH

7.5^/10

CVSS v3.0 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7002721	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247592	VDB Entry Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::

History

21 Jun 2023, 01:20

Type	Values Removed	Values Added
CPE		cpe:2.3:o:ibm:powervm_hypervisor::::::::
First Time		Ibm Ibm powervm Hypervisor
CWE		NVD-CWE-noinfo
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
References	~~(MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 -~~	(MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 - VDB Entry, Vendor Advisory
References	~~(MISC) https://www.ibm.com/support/pages/node/7002721 -~~	(MISC) https://www.ibm.com/support/pages/node/7002721 - Vendor Advisory

15 Jun 2023, 01:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-06-15 01:15

Updated : 2023-06-21 01:20

NVD link : CVE-2023-25683

Mitre link : CVE-2023-25683

JSON object : View

Products Affected

ibm

powervm_hypervisor

CWE

NVD-CWE-noinfo

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.ibm.com/support/pages/node/7002721", "name": "https://www.ibm.com/support/pages/node/7002721", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/247592", "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/247592", "tags": ["VDB Entry", "Vendor Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-25683", "ASSIGNER": "psirt@us.ibm.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}}, "publishedDate": "2023-06-15T01:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "fw1030.11", "versionStartIncluding": "fw1030"}, {"cpe23Uri": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "fw1020.20", "versionStartIncluding": "fw1020"}, {"cpe23Uri": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "fw950.71", "versionStartIncluding": "fw950"}, {"cpe23Uri": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "fw1010.40", "versionStartIncluding": "fw1010"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-06-21T01:20Z"}