GCVE - cpe:2.3:o:ibm:powervm_hypervisor:fw940:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:powervm_hypervisor:fw940:*:*:*:*:*:*:*

part: o version: fw940 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Powervm Hypervisor (`eab5c0e5-62fd-5d57-b562-d981ad00b7a5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38937`	vulnerable	2026-06-08 05:33:48.604693	Details available MEDIUM (6.3) IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894. Published: 2021-12-10T17:50:13.044Z Updated: 2024-09-16T16:57:46.403Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6525014 https://exchange.xforce.ibmcloud.com/vulnerabilities/210894	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38918`	vulnerable	2026-06-08 05:33:48.545036	Details available HIGH (8.6) IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019. Published: 2022-01-05T16:30:11.969Z Updated: 2024-09-16T20:47:29.123Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6525032 https://exchange.xforce.ibmcloud.com/vulnerabilities/210019	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38917`	vulnerable	2026-06-08 05:33:48.543862	Details available HIGH (7.4) IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018. Published: 2021-12-10T17:50:11.461Z Updated: 2024-09-16T17:19:14.549Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6525010 https://exchange.xforce.ibmcloud.com/vulnerabilities/210018	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-29795`	vulnerable	2026-06-08 05:31:27.034183	Details available MEDIUM (6) IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the system. IBM X-Force ID: 203557. Published: 2021-09-21T16:00:14.633Z Updated: 2024-09-17T02:11:21.194Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6490877 https://exchange.xforce.ibmcloud.com/vulnerabilities/203557	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20505`	vulnerable	2026-06-08 05:29:09.376310	Details available MEDIUM (4.4) The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to perform a series of PowerVM service procedures to decrypt the captured migration traffic IBM X-Force ID: 198232 Published: 2021-07-29T12:00:12.703Z Updated: 2024-09-16T17:49:06.197Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6475619 https://exchange.xforce.ibmcloud.com/vulnerabilities/198232	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.