CVE-2026-4937 (GCVE-0-2026-4937)

Vulnerability from cvelistv5 – Published: 2026-08-19 20:11 – Updated: 2026-08-20 15:20
VLAI
Title
Power System Insufficient Entropy
Summary
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.
Severity
5.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 14:18 UTC
CWE
Assigner
References
URL Tags
https://www.ibm.com/support/pages/node/7283900 vendor-advisorypatch
Impacted products
Vendor Product Version CPE status
IBM PowerVM Hypervisor Affected: FW1110.00 , ≤ FW1110.20 (semver)
Affected: FW1060.00 , ≤ FW1060.71 (semver)
Affected: FW950.00 , ≤ FW950.H2 (semver)
    cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power_systems_firmware:fw1110.20:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power_systems_firmware:fw1060.71:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4937",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-20T14:18:54.835231Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-20T15:20:20.047Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1110.20:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw1060.71:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*",
            "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*"
          ],
          "product": "PowerVM Hypervisor",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "FW1110.20",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.71",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW950.H2",
              "status": "affected",
              "version": "FW950.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.\u003c/p\u003e"
            }
          ],
          "value": "IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-331",
              "description": "CWE-331 Insufficient Entropy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T20:11:01.810Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7283900"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers with the products below should install FW1110.30(1110_125), FW1120.00(1120_159), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1180 (9080-HEU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW1110.30(1110_145), FW1120.00(1120_183), or newer to remediate this vulnerability.\u003cbr/\u003ePower 11\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1122 (9824-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1124 (9824-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1122s (9824-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1114 (9824-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1122 (9856-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1124 (9856-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1150 (9043-MRU)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW1060.72(1060_171) / FW1060.80(1060_180), or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System E1080 (9080-HEX)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW1060.72(1060_177) / FW1060.80(1060_185), or newer to remediate this vulnerability.\u003cbr/\u003ePower 10\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S1022 (9105-22A)\u003c/li\u003e\u003cli\u003eIBM Power System S1024 (9105-42A)\u003c/li\u003e\u003cli\u003eIBM Power System S1022s (9105-22B)\u003c/li\u003e\u003cli\u003eIBM Power System S1014 (9105-41B)\u003c/li\u003e\u003cli\u003eIBM Power System L1022 (9786-22H)\u003c/li\u003e\u003cli\u003eIBM Power System L1024 (9786-42H)\u003c/li\u003e\u003cli\u003eIBM Power System E1050 (9043-MRX)\u003c/li\u003e\u003cli\u003eIBM Power System S1012 (9028-21B)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\u003cbr/\u003ePower 9\u003c/p\u003e\u003col\u003e\u003cli\u003eIBM Power System S922 (9009-22G)\u003c/li\u003e\u003cli\u003eIBM Power System H922 (9223-22S)\u003c/li\u003e\u003cli\u003eIBM Power System S914 (9009-41G)\u003c/li\u003e\u003cli\u003eIBM Power System S924 (9009-42G)\u003c/li\u003e\u003cli\u003eIBM Power System H924 (9223-42S)\u003c/li\u003e\u003cli\u003eIBM Power System E950 (9040-MR9)\u003c/li\u003e\u003cli\u003eIBM Power System E980 (9080-M9S)\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003cem\u003eThe images mentioned above can be located at IBM Fix Central : \u003c/em\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003e\u003cem\u003ehttps://www.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers with the products below should install FW1110.30(1110_125), FW1120.00(1120_159), or newer to remediate this vulnerability.\nPower 11\n\n  *  IBM Power System E1180 (9080-HEU)\n\n\nCustomers with the products below should install FW1110.30(1110_145), FW1120.00(1120_183), or newer to remediate this vulnerability.\nPower 11\n\n  *  IBM Power System S1122 (9824-22A)\n  *  IBM Power System S1124 (9824-42A)\n  *  IBM Power System S1122s (9824-22B)\n  *  IBM Power System S1114 (9824-41B)\n  *  IBM Power System L1122 (9856-22H)\n  *  IBM Power System L1124 (9856-42H)\n  *  IBM Power System E1150 (9043-MRU)\n\n\nCustomers with the products below should install FW1060.72(1060_171) / FW1060.80(1060_180), or newer to remediate this vulnerability.\nPower 10\n\n  *  IBM Power System E1080 (9080-HEX)\n\n\nCustomers with the products below should install FW1060.72(1060_177) / FW1060.80(1060_185), or newer to remediate this vulnerability.\nPower 10\n\n  *  IBM Power System S1022 (9105-22A)\n  *  IBM Power System S1024 (9105-42A)\n  *  IBM Power System S1022s (9105-22B)\n  *  IBM Power System S1014 (9105-41B)\n  *  IBM Power System L1022 (9786-22H)\n  *  IBM Power System L1024 (9786-42H)\n  *  IBM Power System E1050 (9043-MRX)\n  *  IBM Power System S1012 (9028-21B)\n\n\nCustomers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\nPower 9\n\n  *  IBM Power System S922 (9009-22G)\n  *  IBM Power System H922 (9223-22S)\n  *  IBM Power System S914 (9009-41G)\n  *  IBM Power System S924 (9009-42G)\n  *  IBM Power System H924 (9223-42S)\n  *  IBM Power System E950 (9040-MR9)\n  *  IBM Power System E980 (9080-M9S)\n\n\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/ https://www.ibm.com/support/fixcentral/"
        }
      ],
      "title": "Power System Insufficient Entropy",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eFully remediating this CVE requires administrators that have enabled Platform Keystore to take the following actions:\u003c/p\u003e\u003cul\u003e\u003cli\u003eReboot any partitions that have Platform Keystore enabled after updating firmware.\u003c/li\u003e\u003cli\u003eRegenerate all cryptographic keys that were generated by Platform Keystore on affected firmware versions, as those keys are considered weak.\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Fully remediating this CVE requires administrators that have enabled Platform Keystore to take the following actions:\n\n  *  Reboot any partitions that have Platform Keystore enabled after updating firmware.\n  *  Regenerate all cryptographic keys that were generated by Platform Keystore on affected firmware versions, as those keys are considered weak."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-4937",
    "datePublished": "2026-08-19T20:11:01.810Z",
    "dateReserved": "2026-03-26T20:42:14.402Z",
    "dateUpdated": "2026-08-20T15:20:20.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-4937",
      "date": "2026-08-26",
      "epss": "0.00099",
      "percentile": "0.00863"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-4937\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2026-08-19T21:16:55.570\",\"lastModified\":\"2026-08-25T20:33:37.260\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.\"}],\"affected\":[{\"source\":\"psirt@us.ibm.com\",\"affectedData\":[{\"vendor\":\"IBM\",\"product\":\"PowerVM Hypervisor\",\"cpes\":[\"cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1110.20:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1060.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw1060.71:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*\",\"cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"FW1110.00\",\"lessThanOrEqual\":\"FW1110.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"FW1060.00\",\"lessThanOrEqual\":\"FW1060.71\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"FW950.00\",\"lessThanOrEqual\":\"FW950.H2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.8,\"impactScore\":4.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":6.0,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.5,\"impactScore\":4.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-20T14:18:54.835231Z\",\"id\":\"CVE-2026-4937\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-331\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1122_\\\\(9824-22a\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"C016EFBA-A371-4264-A823-A7635D39F6D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1122_\\\\(9824-22a\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8707806-84E4-442B-A29F-7BF44514F8DA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1122_\\\\(9824-22a\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96C2DEDC-012D-4B9F-B9DF-344A49B67E46\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1124_\\\\(9824-42a\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"6B512BF5-7D6B-45EA-97B8-F22B63A62270\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1124_\\\\(9824-42a\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25BCA648-5FF1-4B90-98ED-23E5BB217465\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1124_\\\\(9824-42a\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F51514A-8E29-42D1-B874-838F8A0869D2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1122s_\\\\(9824-22b\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"BC8256E1-574D-4666-BE1B-45977348AC86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1122s_\\\\(9824-22b\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2165EAA9-EDC9-4010-9D31-294F9414A9E6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1122s_\\\\(9824-22b\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26E1E16B-8F95-46EC-BAA0-0A53F332292B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1114_\\\\(9824-41b\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"3F8C1054-A539-468C-9A5F-E6E686C6CE8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1114_\\\\(9824-41b\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"085F1C27-D806-4E4B-A44A-BB3C056CFCF7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1114_\\\\(9824-41b\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8688E552-BE38-4EB9-8514-D7060C548C39\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1122_\\\\(9856-22h\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"37868E6E-7759-4CCB-995E-BDB7F61F6818\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1122_\\\\(9856-22h\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50916B93-7340-4344-AF34-91836ABE508F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_l1122_\\\\(9856-22h\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C8998E4-5EA9-4C7E-BF59-644CB78D00D2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1124_\\\\(9856-42h\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"9F0FE92C-3510-475A-8D02-ED17ADD87CD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1124_\\\\(9856-42h\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FECCD687-64E7-45B4-BCB7-AEF25164D049\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_l1124_\\\\(9856-42h\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FB6FA2C-70A5-4F19-B64B-7502D20CFE5C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1150_\\\\(9043-mru\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"DC4CCBFC-3120-475D-BF75-025C04E41B91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1150_\\\\(9043-mru\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE428FBB-4DDC-4E05-A5C3-F37BE9395723\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1150_\\\\(9043-mru\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC9D9EFF-1E92-4894-9976-001227F78869\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1080_\\\\(9080-hex\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"AA6D803F-DD5C-49A7-BE93-68981C124C69\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1080_\\\\(9080-hex\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF85251B-E02C-4293-98F0-D331BF51CAC4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1022_\\\\(9105-22a\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"0BB54554-C9DC-4072-A205-EA9DD4E15688\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1022_\\\\(9105-22a\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3E15C41-9CBD-4F66-A176-07B3E9BBD81D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1024_\\\\(9105-42a\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"FA4B835D-CEAB-422B-9F38-F63AF84396C3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1024_\\\\(9105-42a\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E49EE658-B8AE-48F7-A765-92BA3A630AA0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1022s_\\\\(9105-22b\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"51C2576F-E4DD-4002-9E41-CF89F92E2064\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1022s_\\\\(9105-22b\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"564A665A-7B94-40CE-A4D9-CDD0CCF52B2E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1014_\\\\(9105-41b\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"41572D5A-C3A2-4294-9AF9-D4824675B4A3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1014_\\\\(9105-41b\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECD54B80-5754-4C19-AE0C-F539DEF96DCB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1022_\\\\(9786-22h\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"EEBFE6F7-E6D8-47AC-B011-751FB9BC3D50\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_l1022_\\\\(9786-22h\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2C09090-C18F-464A-8DEF-E23B5990E2A4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_l1024_\\\\(9786-42h\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"D6EA818B-DC65-4F2D-9FC9-C610FFABE3DD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_l1024_\\\\(9786-42h\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0170400B-89A7-4B44-9AA7-9A168C9CAE9C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1050_\\\\(9043-mrx\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"2F04E3C9-94C6-42B0-9FBD-4AC5FEF42A1F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1050_\\\\(9043-mrx\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"061D193E-84BC-4DE7-96C4-B75D11769ED5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s1012_\\\\(9028-21b\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1060.00\",\"versionEndExcluding\":\"fw1060.81\",\"matchCriteriaId\":\"0524365D-8379-4B10-B9C5-FF80EE84BA27\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s1012_\\\\(9028-21b\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BED85F2-8CCB-417C-A739-23828966A036\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1180_\\\\(9080-heu\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw1110.00\",\"versionEndExcluding\":\"fw1110.31\",\"matchCriteriaId\":\"E8049F52-227B-4CCA-B059-5821F9B41C95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e1180_\\\\(9080-heu\\\\)_firmware:fw1120.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F518B3DD-3F25-4581-9103-6CD4D8DA54C7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e1180_\\\\(9080-heu\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8BD4FC49-8120-4D4B-906A-1B6FA6B30FA2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s922_\\\\(9009-22g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"0C406C5A-454C-4454-861F-80E629B68418\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s922_\\\\(9009-22g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95E5E77F-A5BB-46E7-B6B6-B02F242DE829\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_h922_\\\\(9223-22s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"FBE7D8B3-902D-4CD1-9F31-454E293A79B3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_h922_\\\\(9223-22s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7851003-8D6B-4FE8-87D7-BE968E85E448\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s914_\\\\(9009-41g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"CD77C09F-AF62-4CD8-B64C-CDF50D696648\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s914_\\\\(9009-41g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"003F591A-ACCD-497E-BF8A-DE090321D778\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_s924_\\\\(9009-42g\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"54831AF9-D748-4649-A0ED-896341845BCD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_s924_\\\\(9009-42g\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4038C5DB-DF9C-4661-9590-F6A0CD4D15D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_h924_\\\\(9223-42s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"64FD3222-EEFD-4533-A088-B05F04E0831D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_h924_\\\\(9223-42s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2F0E93A-26F0-4914-8A31-3C86E64D5B8A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e950_\\\\(9040-mr9\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"C99CF91B-A98D-4795-A8AE-998713989ABE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e950_\\\\(9040-mr9\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FF58E5C-0A54-4F2F-A426-0BFD1EACE991\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ibm:power_system_e980_\\\\(9080-m9s\\\\)_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"fw950.00\",\"versionEndExcluding\":\"fw950.h3\",\"matchCriteriaId\":\"272B1267-28AC-4BDB-93C4-9804DBE240E0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ibm:power_system_e980_\\\\(9080-m9s\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BE56BD8-DB0F-4151-9428-42F1B6452D99\"}]}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7283900\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.