Powervm
Monthly
Improper handling of sensitive data in the IBM PowerVM Hypervisor partition resource dump interface allows an authenticated administrator on the Hardware Management Console (HMC) or the Power service processor to obtain a limited snapshot of partition processor state, resulting in a confidentiality exposure on the managed system. Affected firmware spans the FW1120.00-FW1120.01, FW1110.00-FW1110.31, FW1060.00-FW1060.81 and FW950.00-FW950.H3 branches. Exploitation requires administrator-level credentials and adjacent-network reachability to the management plane (CVSS 3.1 base score 3.4, vector AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N); there is no public exploit identified at time of analysis, and the practical risk is low because the prerequisite privileged management access is itself a strong barrier and the disclosure is limited in scope.
Local root access inside a guest logical partition (LPAR) on IBM PowerVM systems running affected partition firmware allows an attacker to send a crafted request to the partition firmware runtime and crash it, with possible memory corruption. Rated CVSS 5.1 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H), the flaw affects firmware lines FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81 and FW950.00 through FW950.H3; no public exploit has been identified at time of analysis, and the realistic outcome is denial of service to the partition firmware runtime rather than confirmed cross-partition code execution. The guest-root prerequisite makes this a bounded, low-priority risk relevant mainly to multi-tenant or compromised LPARs on shared Power hardware.
Root-level attackers inside an IBM PowerVM logical partition can corrupt the partition firmware runtime boot configuration stored in NVRAM, leaving that partition unable to boot until an operator manually deletes and recreates the partition configuration. The issue affects PowerVM firmware levels FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3, and requires pre-existing root privileges within the target partition (CVSS 3.1 AV:L/PR:H, base score 5.1) with no remote or unauthenticated path to exploitation. There is no public exploit identified at time of analysis and no confirmed active exploitation; the practical risk is post-compromise sabotage or persistence against the attacker's own partition rather than an initial-access vector.
Denial of service in IBM PowerVM Hypervisor firmware affects logical partitions running affected FW1120, FW1110, FW1060, or FW950 levels: an attacker who already holds root inside an LPAR can send a crafted RTAS firmware-to-OS request and crash that partition, making it unavailable. The vulnerability is local-only, requires high privileges, and is contained to the attacker's partition, so other LPARs on the same managed system are not affected. No public exploit was identified at time of analysis, and the CVSS 3.1 score is 5.1 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Improper handling of sensitive data in the IBM PowerVM Hypervisor partition resource dump interface allows an authenticated administrator on the Hardware Management Console (HMC) or the Power service processor to obtain a limited snapshot of partition processor state, resulting in a confidentiality exposure on the managed system. Affected firmware spans the FW1120.00-FW1120.01, FW1110.00-FW1110.31, FW1060.00-FW1060.81 and FW950.00-FW950.H3 branches. Exploitation requires administrator-level credentials and adjacent-network reachability to the management plane (CVSS 3.1 base score 3.4, vector AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N); there is no public exploit identified at time of analysis, and the practical risk is low because the prerequisite privileged management access is itself a strong barrier and the disclosure is limited in scope.
Local root access inside a guest logical partition (LPAR) on IBM PowerVM systems running affected partition firmware allows an attacker to send a crafted request to the partition firmware runtime and crash it, with possible memory corruption. Rated CVSS 5.1 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H), the flaw affects firmware lines FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81 and FW950.00 through FW950.H3; no public exploit has been identified at time of analysis, and the realistic outcome is denial of service to the partition firmware runtime rather than confirmed cross-partition code execution. The guest-root prerequisite makes this a bounded, low-priority risk relevant mainly to multi-tenant or compromised LPARs on shared Power hardware.
Root-level attackers inside an IBM PowerVM logical partition can corrupt the partition firmware runtime boot configuration stored in NVRAM, leaving that partition unable to boot until an operator manually deletes and recreates the partition configuration. The issue affects PowerVM firmware levels FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3, and requires pre-existing root privileges within the target partition (CVSS 3.1 AV:L/PR:H, base score 5.1) with no remote or unauthenticated path to exploitation. There is no public exploit identified at time of analysis and no confirmed active exploitation; the practical risk is post-compromise sabotage or persistence against the attacker's own partition rather than an initial-access vector.
Denial of service in IBM PowerVM Hypervisor firmware affects logical partitions running affected FW1120, FW1110, FW1060, or FW950 levels: an attacker who already holds root inside an LPAR can send a crafted RTAS firmware-to-OS request and crash that partition, making it unavailable. The vulnerability is local-only, requires high privileges, and is contained to the attacker's partition, so other LPARs on the same managed system are not affected. No public exploit was identified at time of analysis, and the CVSS 3.1 score is 5.1 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.