Vulnerabilities > IBM > Powervm Hypervisor > fw1010

DATE CVE VULNERABILITY TITLE RISK
2023-06-15 CVE-2023-25683 Unspecified vulnerability in IBM Powervm Hypervisor
IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC.
network
low complexity
ibm
7.5
2023-05-23 CVE-2023-30440 Improper Input Validation vulnerability in IBM Powervm Hypervisor
IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption.
local
low complexity
ibm CWE-20
7.9
2022-11-11 CVE-2022-34331 Improper Authentication vulnerability in IBM Powervm Hypervisor Fw1010/Fw950
After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled.
network
low complexity
ibm CWE-287
critical
9.8
2022-01-05 CVE-2021-38918 Unspecified vulnerability in IBM Powervm Hypervisor
IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs.
network
low complexity
ibm
5.0
2021-12-10 CVE-2021-38937 Unspecified vulnerability in IBM Powervm Hypervisor Fw1010/Fw940/Fw950
IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call.
network
low complexity
ibm
6.8