Description (CNA)
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / PowerVM Hypervisor | affected FW1120.00; affected FW1110.00 through FW1110.30; affected FW1060.00 through FW1060.80; affected FW950.00 through FW950.H2 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.