CVE-2025-36238

MEDIUM EPSS 5.0%
Published Feb 2, 20265mo ago · Modified Jun 17, 20262w ago
6.0 CVSS 3.1
Medium
Find Similar
Published Feb 2, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

CVSS Details

Base Score
6.0
Exploitability
1.5
Impact
4.0
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Changed
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
5.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-497

Affected Products 34

VendorProductVersionRange
ibmpowervm_hypervisorfw950.00any
ibmpowervm_hypervisorfw950.10any
ibmpowervm_hypervisorfw950.11any
ibmpowervm_hypervisorfw950.20any
ibmpowervm_hypervisorfw950.30any
ibmpowervm_hypervisorfw950.40any
ibmpowervm_hypervisorfw950.50any
ibmpowervm_hypervisorfw950.60any
ibmpowervm_hypervisorfw950.70any
ibmpowervm_hypervisorfw950.71any
ibmpowervm_hypervisorfw950.80any
ibmpowervm_hypervisorfw950.90any
ibmpowervm_hypervisorfw950.a0any
ibmpowervm_hypervisorfw950.b0any
ibmpowervm_hypervisorfw950.c0any
ibmpowervm_hypervisorfw950.c1any
ibmpowervm_hypervisorfw950.c2any
ibmpowervm_hypervisorfw950.d0any
ibmpowervm_hypervisorfw950.d1any
ibmpowervm_hypervisorfw950.e0any
ibmpowervm_hypervisorfw950.e1any
ibmpowervm_hypervisorfw950.f0any
ibmpowervm_hypervisorfw1060.00any
ibmpowervm_hypervisorfw1060.10any
ibmpowervm_hypervisorfw1060.12any
ibmpowervm_hypervisorfw1060.20any
ibmpowervm_hypervisorfw1060.21any
ibmpowervm_hypervisorfw1060.40any
ibmpowervm_hypervisorfw1060.41any
ibmpowervm_hypervisorfw1060.50any
ibmpowervm_hypervisorfw1060.51any
ibmpowervm_hypervisorfw1110.00any
ibmpowervm_hypervisorfw1110.01any
ibmpowervm_hypervisorfw1110.03any

References 1

  • ibm.com https://www.ibm.com/support/pages/node/7257556
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.