Advisoriesby IbisIBMCVE-2026-16832
IBM Power Systems Firmware: remote code execution
No fix yet
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Power Systems Firmware Product | <= FW1120.00 | No fix yet |
| >= FW1110.00, <= FW1110.30 | No fix yet | |
| >= FW1060.00, <= FW1060.80 | No fix yet | |
| >= FW950.00, <= FW950.H2 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-121