What is CVE-2023-30438?

CVE-2023-30438 is a critical-severity vulnerability in IBM Power System E1050. CVSS score: 9.3/10. Published 2023-05-17.

How severe is CVE-2023-30438?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Vulnerability in IBM Power System E1050

CVE-2023-30438

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.

EPSS: 0.002 (14.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

References

psirt@us.ibm.com (vendor-advisory, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory)

Frequently asked questions

What is CVE-2023-30438?: CVE-2023-30438 is a critical-severity vulnerability in IBM Power System E1050. CVSS score: 9.3/10. Published 2023-05-17.
How severe is CVE-2023-30438?: Critical severity. CVSS v3 base score is 9.3 out of 10.