Vulnerability in Ibm Powervm Hypervisor
CVE-2021-20505
The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gai…
EPSS: 0.001 (27.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/UI:N/S:U/I:N/C:H/AC:H/PR:H/AV:N/A:N/RC:C/RL:O/E:U.
Affected products
- Ibm Powervm Hypervisor — versions FW920, FW930, FW940
References
- www.ibm.com/support/pages/node/6475619 (x_refsource_CONFIRM)
- ibm-powervm-cve202120505-info-disc (198232) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2021-20505?
- CVE-2021-20505 is a medium-severity vulnerability in Ibm Powervm Hypervisor. CVSS score: 4.4/10. Published 2021-07-29.
- How severe is CVE-2021-20505?
- Medium severity. CVSS v3 base score is 4.4 out of 10.