CVE-2023-30440

published 2023-05-23

CVE-2023-30440: IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through…

Priority P3 35 high 7.9 CVSS 3.1

AV L AC L PR N UI N S C C N I L A H

IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
ibm	powervm_hypervisor	FW1010.00 – FW1010.50	—
ibm	powervm_hypervisor	FW1020.00 – FW1020.30	—
ibm	powervm_hypervisor	FW1030.00 – FW1030.10	—
ibm	powervm_hypervisor	FW860.00 – FW860.B3	—
ibm	powervm_hypervisor	FW950.00 – FW950.70	—
ibm	powervm_hypervisor	fw1010 – fw1010.50	—
ibm	powervm_hypervisor	fw1020.00 – fw1020.30	—
ibm	powervm_hypervisor	fw1030.00 – fw1030.10	—
ibm	powervm_hypervisor	fw860 – fw860.b3	—
ibm	powervm_hypervisor	fw950 – fw950.70	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20