CVE-2026-4936
mediumPriorität · verfolgen · 25EPSS 0.001 · 1. PerzentilUSEPSS · bewertet 2026-10-24
IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (34)
Betroffene Produkte und Versionsbereiche.
- ibm power system e1050 (9043-mrx) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1080 (9080-hex) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmwarefw1110.00 → fw1110.30nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmwarefw1110.00 → fw1110.30nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e950 (9040-mr9) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e980 (9080-m9s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h922 (9223-22s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h924 (9223-42s) firmwarefw950.00 → fw950.h3nvdUScpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1022 (9786-22h) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1024 (9786-42h) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmwarefw1110.00 → fw1110.30nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmwarefw1110.00 → fw1110.30nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmware= fw1120.00nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1012 (9028-21b) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1014 (9105-41b) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022 (9105-22a) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022s (9105-22b) firmwarefw1060.00 → fw1060.72nvdUScpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (1) nvd
Externe Belege — Patches, Meldungen, Analysen.
- https://www.ibm.com/support/pages/node/7283890Vendor Advisory
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan