CyberRota Analysis
AI-GeneratedThe IBM PowerVM Hypervisor Platform KeyStore and virtual TPM versions FW1110.00 to FW1110.20, FW1060.00 to FW1060.71, and FW950.00 to FW950.H2 are vulnerable due to the use of persistent storage key seeds that lead to a weakened AES encryption key. This vulnerability allows an attacker with access to the service processor or HMC to potentially derive the encryption key, compromising sensitive data. Organizations utilizing these specific versions should prioritize remediation to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)