CVE-2022-34331

2022-11-1118:15:09

CWE-287

[email protected]

web.nvd.nist.gov

sriov network adapter

ibm x-force id

vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.3%

JSON

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695.

Affected configurations

Nvd

Node

ibmpowervm_hypervisorMatchfw950

ibmpowervm_hypervisorMatchfw1010

VendorProductVersionCPE
ibmpowervm_hypervisorfw950cpe:2.3:o:ibm:powervm_hypervisor:fw950:*:*:*:*:*:*:*
ibmpowervm_hypervisorfw1010cpe:2.3:o:ibm:powervm_hypervisor:fw1010:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	powervm_hypervisor	fw950	cpe:2.3:o:ibm:powervm_hypervisor:fw950:::::::*
ibm	powervm_hypervisor	fw1010	cpe:2.3:o:ibm:powervm_hypervisor:fw1010:::::::*