« Volver al listado

CVE-2024-41781

Estado: AnalizadaMedia (5.9)—

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Powervm Hypervisor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-41781",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-41781",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-22T15:34:30.745067Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.1,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 0.7
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:ibm:power9_system_firmware:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw950.90:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1030.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1030.60:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1050.20:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1060.10:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "PowerVM Hypervisor",
          "versions": [
            {
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW950.90"
            },
            {
              "status": "affected",
              "version": "FW1030.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW1030.60"
            },
            {
              "status": "affected",
              "version": "FW1050.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW1050.20"
            },
            {
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW1060.10"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-11-22T12:15:19.193",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7172698",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-497"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC.  An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore."
    },
    {
      "lang": "es",
      "value": "La funcionalidad de IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 a FW950.90, FW1030.00 a FW1030.60, FW1050.00 a FW1050.20 y FW1060.00 a FW1060.10) puede verse comprometida si un atacante obtiene acceso de servicio a la HMC. Un atacante que obtiene acceso de servicio a la HMC puede localizar y, a través de una serie de procedimientos de servicio, descifrar los datos contenidos en Platform KeyStore."
    }
  ],
  "lastModified": "2026-06-17T07:48:13.373",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03E49718-6EB5-4246-BCCF-8FCC7DAC1B5C",
              "versionEndIncluding": "fw950.b0",
              "versionStartIncluding": "fw950.00"
            },
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF4CF9E6-B382-4E79-ACD4-9D341CD4E8CE",
              "versionEndIncluding": "fw1030.60",
              "versionStartIncluding": "fw1030.00"
            },
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89468AD1-B4AD-4664-8947-F8BF656CA74C",
              "versionEndIncluding": "fw1050.20",
              "versionStartIncluding": "fw1050.00"
            },
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "964892FF-93D8-4072-9BB3-8AB297B783BC",
              "versionEndIncluding": "fw1060.10",
              "versionStartIncluding": "fw1060.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "979E8340-B175-4248-820B-4FC7306D12C3"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B9B5E3B4-BA6B-47C4-8591-709DF67017CA"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3FCDAAD9-A28E-4898-8A60-4B95EAD37E80"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8139F881-7EB2-4C6F-B8F1-CB210A7DB3A6"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "84563A0F-ECE3-4A6B-8167-7ABF52B78D3B"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8DE5D80E-5A45-43EF-98F0-311D6DFBAC32"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EA5B852F-8016-4996-BC56-6B52E3880298"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B5CC42E6-BF00-4D10-B087-F92F8001C192"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}