Read the docs
TI-2023-14280 Aliases CVE-2023-30438GHSA-8m9h-3vxr-jw8j

IBM PowerVM gain access

Priority MEDIUM 42Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00236 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMPowerVM HypervisorFW950.00 – FW950.70; FW1010.00 – FW1010.50; FW1020.00 – FW1020.30; FW1030.00 – FW1030.10—No fix listedCNA
  • PowerVM Hypervisor VendorIBM Affected FW950.00 – FW950.70; FW1010.00 – FW1010.50; FW1020.00 – FW1020.30; FW1030.00 – FW1030.10 Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*fw950 to before fw950.71VulnerableIBM
cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*fw1010.00 to before fw1010.51; fw1030.00 to before fw1030.11VulnerableIBM
  • cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:* Versions fw950 to before fw950.71 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:* Versions fw1010.00 to before fw1010.51; fw1030.00 to before fw1030.11 Vulnerable ·IBM
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:ibm:power_system_e1080:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*fw1020.00 to before fw1020.31VulnerableIBM
cpe:2.3:h:ibm:power_system_e1050:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_l1022:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_l1024:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s1014:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s1022:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s1022s:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:h:ibm:power_system_s1024:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
  • cpe:2.3:h:ibm:power_system_e1080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:* Versions fw1020.00 to before fw1020.31 Vulnerable ·IBM
  • cpe:2.3:h:ibm:power_system_e1050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_l1022:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_l1024:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s1014:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s1022:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s1022s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:h:ibm:power_system_s1024:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-30438
  2. 2026-10-03 Alias added: GHSA-8m9h-3vxr-jw8j

References

Advisory 1

  • TI-2022-15241 IBM Power FW security bypass CVSS 3.1CRITICAL 9.8
  • TI-2021-16362 IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service… CVSS 3.1CRITICAL 9.1
  • TI-2021-16363 IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM… CVSS 3.1HIGH 7.5
  • TI-2023-14281 IBM PowerVM Hypervisor denial of service CVSS 3.1HIGH 7.9
  • TI-2023-10961 IBM PowerVM Hypervisor information disclosure CVSS 3.1HIGH 7.5
  • TI-2021-16379 IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to… CVSS 3.1MEDIUM 6.5
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences