High severity · published May 17, 2023
CVE-2023-30438
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an…
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Powervm Hypervisor · Ibm
fw950 before fw950.71; fw1010.00 before fw1010.51; fw1030.00 before fw1030.11; fw1020.00 before fw1020.31; fw1030.00 before fw1030.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-30438
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-30438
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/252706
Vendor Advisory
https://www.ibm.com/support/pages/node/6993021
More from Powervm Hypervisor
9.8
CVE-2022-34331
After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being…
9.1
CVE-2021-38917
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of…
8.4
CVE-2026-11885
Power System update in Buffer Copy
8.2
CVE-2026-96262
IBM Power Systems Firmware Buffer Overflow
8.2
CVE-2026-96263
IBM Power Systems Firmware Buffer Overflow