CVE-2022-22445 — IBM Powervm Hypervisor vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 55.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Powervm Hypervisor
Timeline
PublishedJul 18
Latest updateJul 19

Description

An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/powervm_hypervisorfw950 — fw950.40+1
▶CVEListV5ibm/powervm_hypervisorFW1010, FW950+1

🔴Vulnerability Details

2
GHSA
GHSA-wpqf-f5ff-6c5w: An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware↗2022-07-19
▶
CVEList
CVE-2022-22445: An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware↗2022-07-18
▶
CVE-2022-22445 — IBM Powervm Hypervisor vulnerability | cvebase