Veille CVE
CVE-2026-16832
8.4 ÉlevéeDescription
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Produits concernés
- IBM Power Systems Firmware
- Ibm power system e1080 \(9080-hex\) firmware
- Ibm power system e1180 \(9080-heu\) firmware
- Ibm power system s922 \(9009-22g\) firmware
- Ibm power system h922 \(9223-22s\) firmware
- Ibm power system s914 \(9009-41g\) firmware
- Ibm power system s924 \(9009-42g\) firmware
- Ibm power system h924 \(9223-42s\) firmware
- Ibm power system e950 \(9040-mr9\) firmware
- Ibm power system e980 \(9080-m9s\) firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.4 Élevée | psirt@us.ibm.com | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://www.ibm.com/support/pages/node/7283895 Vendor Advisory