« Volver al listado

CVE-2025-36035

Estado: En análisisMedia (5.1)—

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Powervm Hypervisor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-36035",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-36035",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-09-15T15:58:51.498887Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 1.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:ibm:power9_system_firmware:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw950.E0:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1050.50:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power9_system_firmware:fw1060.40:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "PowerVM Hypervisor",
          "versions": [
            {
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW950.E0"
            },
            {
              "status": "affected",
              "version": "FW1050.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW1050.50"
            },
            {
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver",
              "lessThanOrEqual": "FW1060.40"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-09-14T13:15:32.450",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7244813",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources."
    }
  ],
  "lastModified": "2026-06-17T09:14:24.130",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C075224C-3299-4E1F-BC3B-11EB6BDCF705",
              "versionEndIncluding": "FW950.E0",
              "versionStartIncluding": "FW950.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e950_\\(9040-mr9\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9FF58E5C-0A54-4F2F-A426-0BFD1EACE991"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e980_\\(9080-m9s\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9BE56BD8-DB0F-4151-9428-42F1B6452D99"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22h\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "633D5D2E-300A-4896-8F90-57F9B7AFE01E"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h922_\\(9223-22s\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E7851003-8D6B-4FE8-87D7-BE968E85E448"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h924_\\(\\(9223-42s\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D1F77E3F-524F-491E-AE7B-FAEE4DC251F6"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_h924_\\(9223-42h\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "24CC25C2-BE64-4022-A229-D639CED27B00"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l922_\\(9008-22l\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "61493605-7807-498B-9DD7-48B244AD0415"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41a\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5D9CA070-A7E4-451A-9C3C-D2622E7A9A92"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s914_\\(9009-41g\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "003F591A-ACCD-497E-BF8A-DE090321D778"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22a\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8AB350B1-3964-485A-AAB3-55558DD375BD"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s922_\\(9009-22g\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "95E5E77F-A5BB-46E7-B6B6-B02F242DE829"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42a\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "65A41386-AAE5-409C-9355-2EEB07F01926"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s924_\\(9009-42g\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4038C5DB-DF9C-4661-9590-F6A0CD4D15D5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B2026A2-926D-402B-8181-8AC2E90F4AC2",
              "versionEndIncluding": "FW1050.50",
              "versionStartIncluding": "FW1050.00"
            },
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B633D94D-3566-44D8-BA35-62F7942E8DB5",
              "versionEndIncluding": "FW1060.40",
              "versionStartIncluding": "FW1060.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1080_\\(9080-hex\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DF85251B-E02C-4293-98F0-D331BF51CAC4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B2026A2-926D-402B-8181-8AC2E90F4AC2",
              "versionEndIncluding": "FW1050.50",
              "versionStartIncluding": "FW1050.00"
            },
            {
              "criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B633D94D-3566-44D8-BA35-62F7942E8DB5",
              "versionEndIncluding": "FW1060.40",
              "versionStartIncluding": "FW1060.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1050_\\(9043-mrx\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "061D193E-84BC-4DE7-96C4-B75D11769ED5"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1022_\\(9786-22h\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B2C09090-C18F-464A-8DEF-E23B5990E2A4"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1024_\\(9786-42h\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0170400B-89A7-4B44-9AA7-9A168C9CAE9C"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1012_\\(9028-21b\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BED85F2-8CCB-417C-A739-23828966A036"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1014_\\(9105-41b\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ECD54B80-5754-4C19-AE0C-F539DEF96DCB"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022_\\(9105-22a\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E3E15C41-9CBD-4F66-A176-07B3E9BBD81D"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022s_\\(9105-22b\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "564A665A-7B94-40CE-A4D9-CDD0CCF52B2E"
            },
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1024_\\(9105-42a\\):-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E49EE658-B8AE-48F7-A765-92BA3A630AA0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}