2 lines
6.1 KiB
JSON
2 lines
6.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Power 9 Systems","vendor":"IBM","versions":[{"status":"affected","version":"FW930"},{"status":"affected","version":"FW940"},{"status":"affected","version":"FW941"},{"status":"affected","version":"OP940"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:power9_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CCEDA6C8-69E8-455C-AC29-5424603CD45B","versionEndExcluding":"fw930.30","versionStartIncluding":"fw930.00","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:power9_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A672A461-81E2-4B42-BF2A-6AEE3FEA0568","versionEndExcluding":"fw940.20","versionStartIncluding":"fw940.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:9008-22l:-:*:*:*:*:*:*:*","matchCriteriaId":"E18BF499-CBDC-4608-A613-ECD3DB1E3338","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9009-22a:-:*:*:*:*:*:*:*","matchCriteriaId":"57588DE0-FC4C-4E38-A51D-2878764D98B7","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9009-41a:-:*:*:*:*:*:*:*","matchCriteriaId":"4190878F-C66E-4AFA-8BEE-1577EF02AB90","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9009-42a:-:*:*:*:*:*:*:*","matchCriteriaId":"3880DCD3-E0E8-48BB-A3BE-7E97574B3CFB","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9040-mr9:-:*:*:*:*:*:*:*","matchCriteriaId":"4893C7F3-0CC9-48BF-805D-45E4F7288244","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9080-m9s:-:*:*:*:*:*:*:*","matchCriteriaId":"1A10ED3B-CB3F-426A-81C9-710683927B2A","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9223-22h:-:*:*:*:*:*:*:*","matchCriteriaId":"B7194BCD-0DA3-4CDA-A133-A11A6F4C6020","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9223-42h:-:*:*:*:*:*:*:*","matchCriteriaId":"EB13C466-5751-4C96-8E37-AEC0F61DECF9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:power9_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F35A54AD-5DED-4D55-BA5E-42B752B9E6FF","versionEndExcluding":"fw950.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:9009-22g:-:*:*:*:*:*:*:*","matchCriteriaId":"BFB756EE-B71D-4E5F-B84B-E5A1C8FBCC05","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9009-41g:-:*:*:*:*:*:*:*","matchCriteriaId":"33DA8E99-1693-42EB-B31E-1907C4789EDE","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9009-42g:-:*:*:*:*:*:*:*","matchCriteriaId":"037C5223-B23E-4E97-A521-97EF71FE5A48","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9223-22s:-:*:*:*:*:*:*:*","matchCriteriaId":"46ECB3A0-0AEB-4B81-8F8A-3CFDFA18B6FB","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9223-42s:-:*:*:*:*:*:*:*","matchCriteriaId":"509B153F-215A-48E7-B643-50E6846F6F16","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:scale-out_lc_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D7F76191-BD6D-43D5-94A4-3C9E1DBA231D","versionEndExcluding":"op940.20","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:8335-gth:-:*:*:*:*:*:*:*","matchCriteriaId":"3113AD78-CB3E-4288-A83B-2FBC7F96F7C2","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:8335-gtx:-:*:*:*:*:*:*:*","matchCriteriaId":"C70F690D-3385-43F5-ABF0-CB5CA05B65BF","vulnerable":false},{"criteria":"cpe:2.3:h:ibm:9183-22x:-:*:*:*:*:*:*:*","matchCriteriaId":"80232C68-A3A4-4236-8478-0A9EA97C349E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature verification process."},{"lang":"es","value":"IBM Power9 Self Boot Engine (SBE), podría permitir a un usuario privilegiado inyectar código malicioso y comprometer la integridad del firmware del host al omitir el proceso de comprobación de la firma del firmware del host"}],"id":"CVE-2021-20487","lastModified":"2026-06-17T03:33:54.840","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.3,"impactScore":6.0,"source":"psirt@us.ibm.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.3,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-05-26T17:15:14.260","references":[{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/197730"},{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6455911"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/197730"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6455911"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"nvd@nist.gov","type":"Primary"}]}
|