Medium severity · published Nov 22, 2024
CVE-2024-41781
IBM PowerVM Hypervisor information disclosure
5.9
CVSS
0.3%
EPSS
No
On KEV
Description
IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PowerVM Hypervisor · IBM
FW950.00 through FW950.90; FW1030.00 through FW1030.60; FW1050.00 through FW1050.20; FW1060.00 through FW1060.10 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41781
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41781
Vendor Advisory
https://www.ibm.com/support/pages/node/7172698
More from PowerVM Hypervisor
9.8
CVE-2024-45656
IBM Flexible Service Processor hard coded credentials
9.1
CVE-2021-20487
IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature…
5.1
CVE-2025-36035
IBM PowerVM Hypervisor denial of service
4.4
CVE-2025-0986
IBM PowerVM Hypervisor data manipulation