CVE-2022-35643: Critical severity IBM PowerVM VIOS vulnerability
Published Jul 28, 2022
·Updated
IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM X-Force ID: 230956.
Other sources
IBM PowerVM VIOS could allow a remote attacker to tamper with system configuration or cause a denial of service.
Affected Software
2 affected components
IBM PowerVM VIOS<=3.1
IBM Powervm Virtual I\/o Server=3.1.0
Remediation
Patch Available
Event History
Jul 28, 2022
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Jul 29, 2022
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is remotely exploitable over the network and requires no privileges or user interaction, based on the CVSS vector.
2
What is the potential impact on an affected system?
A remote attacker could tamper with system configuration or cause a denial of service. The CVSS vector indicates high confidentiality and availability impact, with no integrity impact listed.
3
Is a fix available?
Yes. A patch is available from IBM.