CVE-2023-25683: IBM PowerVM Hypervisor information disclosure

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-15 · updated 2026-06-17
Weakness: CWE-200

Description

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.

Affected products

IBM PowerVM Hypervisor: from fw950 through fw950.71; from fw1010 through fw1010.40; from fw1020 through fw1020.20; from fw1030 through fw1030.11

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/247592
https://www.ibm.com/support/pages/node/7002721
https://exchange.xforce.ibmcloud.com/vulnerabilities/247592
https://www.ibm.com/support/pages/node/7002721

Get alerted when CVE-2023-25683 or the next vulnerability affects your stack