CVE-2021-38917
CVE-2021-38917
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.4EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Dec 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.
CVSS:3.0/AV:N/PR:N/UI:N/I:H/AC:H/C:H/A:N/S:U/RC:C/RL:O/E:U
Affected products
IBM · PowerVM HypervisorWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →