CVE-2022-34331 - OpenCVE

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Ibm	Powervm Hypervisor

Configuration 1 [-]

OR	cpe:2.3:o:ibm:powervm_hypervisor:fw950:::::::*
	cpe:2.3:o:ibm:powervm_hypervisor:fw1010:::::::*

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/229695	Broken Link VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6833632	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ibm

Published: 2022-11-11T17:45:30.583Z

Updated:

Reserved: 2022-06-22T19:42:48.457Z

Link: CVE-2022-34331

JSON object: View

NVD Information

Status : Modified

Published: 2022-11-11T18:15:09.767

Modified: 2023-11-07T03:48:32.757

Link: CVE-2022-34331

JSON object: View

Redhat Information

No data.

CWE

CWE-287

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:fw950:*:*:*:*:*:*:*", "matchCriteriaId": "84837FC8-545A-44B4-8144-F8DC8EBCB165", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:fw1010:*:*:*:*:*:*:*", "matchCriteriaId": "9A129D1C-318D-4755-8654-FC6BA978ADE0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695."}, {"lang": "es", "value": "Despu\u00e9s de realizar una secuencia de operaciones de mantenimiento de Power FW950, FW1010, es posible que un adaptador de red SRIOV est\u00e9 configurado incorrectamente, lo que provocar\u00e1 que se desactive la configuraci\u00f3n VEPA deseada. ID de IBM X-Force: 229695."}], "id": "CVE-2022-34331", "lastModified": "2023-11-07T03:48:32.757", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 3.7, "source": "psirt@us.ibm.com", "type": "Secondary"}]}, "published": "2022-11-11T18:15:09.767", "references": [{"source": "psirt@us.ibm.com", "tags": ["Broken Link", "VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/229695"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6833632"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}