CVE-2023-30438
Estado: ModificadaAlta (8.8)—
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.24%
- Percentil entre todas las CVEs puntuadas: 13
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-30438",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-30438",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-01-22T16:47:57.952272Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.3,
"attackVector": "LOCAL",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "PowerVM Hypervisor",
"versions": [
{
"status": "affected",
"version": "FW950.00",
"versionType": "semver",
"lessThanOrEqual": "FW950.70"
},
{
"status": "affected",
"version": "FW1010.00",
"versionType": "semver",
"lessThanOrEqual": "FW1010.50"
},
{
"status": "affected",
"version": "FW1020.00",
"versionType": "semver",
"lessThanOrEqual": "FW1020.30"
},
{
"status": "affected",
"version": "FW1030.00",
"versionType": "semver",
"lessThanOrEqual": "FW1030.10"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-05-17T13:15:09.380",
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/252706",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.ibm.com/support/pages/node/6993021",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/252706",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.ibm.com/support/pages/node/6993021",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706."
}
],
"lastModified": "2026-06-17T05:54:42.063",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A87B171-ADB7-4B46-98DD-20A73CAFB967",
"versionEndExcluding": "fw950.71",
"versionStartIncluding": "fw950"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "979E8340-B175-4248-820B-4FC7306D12C3"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B9B5E3B4-BA6B-47C4-8591-709DF67017CA"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3FCDAAD9-A28E-4898-8A60-4B95EAD37E80"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8139F881-7EB2-4C6F-B8F1-CB210A7DB3A6"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "84563A0F-ECE3-4A6B-8167-7ABF52B78D3B"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8DE5D80E-5A45-43EF-98F0-311D6DFBAC32"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EA5B852F-8016-4996-BC56-6B52E3880298"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5CC42E6-BF00-4D10-B087-F92F8001C192"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "274B5B39-45C7-46AB-97DF-974EF88FD584",
"versionEndExcluding": "fw1010.51",
"versionStartIncluding": "fw1010.00"
},
{
"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "191E23FB-FB7F-4869-9B98-B1F8D0B678B9",
"versionEndExcluding": "fw1030.11",
"versionStartIncluding": "fw1030.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1080:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5FBC7B07-A1AC-4C5A-B35F-337DECC4BC48"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E56875D-2B34-4ADD-B881-42AD238E7C4F",
"versionEndExcluding": "fw1020.31",
"versionStartIncluding": "fw1020.00"
},
{
"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "191E23FB-FB7F-4869-9B98-B1F8D0B678B9",
"versionEndExcluding": "fw1030.11",
"versionStartIncluding": "fw1030.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:power_system_e1050:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "519789D1-EB8C-4072-A427-AF4B86160743"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_l1022:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "22EEBF55-9F36-40D7-B12D-B5623A2A5522"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_l1024:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2213E4C9-2078-43E0-B3EF-0F8D4DF49777"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s1014:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5ADC40A2-FBDC-4AE9-9B5F-085F0AF09653"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s1022:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7FE513F0-A79D-498D-BDFA-F593D81DAE0B"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s1022s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1305DC74-3CD8-4F03-A6E1-75C50B24ACDF"
},
{
"criteria": "cpe:2.3:h:ibm:power_system_s1024:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "40EC041F-71BA-49FB-8174-36002C650AAC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}