CVE-2024-41781

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore.
References
Link Resource
https://www.ibm.com/support/pages/node/7172698 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
OR cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*

History

15 Aug 2025, 17:33

Type Values Removed Values Added
CPE cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7172698 - () https://www.ibm.com/support/pages/node/7172698 - Vendor Advisory
CWE NVD-CWE-noinfo
First Time Ibm power System E950
Ibm power System S922
Ibm power System H922
Ibm power System S924
Ibm power System E980
Ibm powervm Hypervisor
Ibm power System H924
Ibm power System L922
Ibm power System S914
Ibm

22 Nov 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-22 12:15

Updated : 2025-08-15 17:33


NVD link : CVE-2024-41781

Mitre link : CVE-2024-41781

CVE.ORG link : CVE-2024-41781


JSON object : View

Products Affected

ibm

  • power_system_e950
  • power_system_h924
  • powervm_hypervisor
  • power_system_s924
  • power_system_l922
  • power_system_s922
  • power_system_s914
  • power_system_e980
  • power_system_h922
CWE
CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVD-CWE-noinfo