by Kastro
Paper/Archive/CVE-2021-38917

CVE-2021-38917

IBM PowerVM Hypervisor — IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary…

EPSS 2%CVSS 9.1
critical.is priorityof 100
42
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 75.6.756 × 2015.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.

Affected

ProductAffectedFixed inSource
PowerVM HypervisorFW940–CNA
PowerVM HypervisorFW950–CNA
PowerVM HypervisorFW860–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
ibm (CNA)7.4CVSS:3.0/AV:N/PR:N/UI:N/I:H/AC:H/C:H/A:N/S:U/RC:C/RL:O/E:U

References

refibm.com/support/pages/node/6525010refexchange.xforce.ibmcloud.com/vulnerabilities/210018