CVE-2026-17429

Published: Aug 19, 2026Modified: Aug 25, 2026

8.1

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: psirt@us.ibm.com (Secondary)

Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected (38)

Ibm

29 products

Power System S1122 (9824 22a) Firmware

Power System S1124 (9824 42a) Firmware

Power System S1122s (9824 22b) Firmware

Power System S1114 (9824 41b) Firmware

Power System L1122 (9856 22h) Firmware

Power System L1124 (9856 42h) Firmware

Power System E1150 (9043 Mru) Firmware

Power System S1112 (9242 21b) Firmware

Power System S1112 (9242 21t) Firmware

Power System E1080 (9080 Hex) Firmware

Power System S1022 (9105 22a) Firmware

Power System S1024 (9105 42a) Firmware

Power System S1022s (9105 22b) Firmware

Power System S1014 (9105 41b) Firmware

Power System L1022 (9786 22h) Firmware

Power System L1024 (9786 42h) Firmware

Power System E1050 (9043 Mrx) Firmware

Power System S1012 (9028 21b) Firmware

Power System E1180 (9080 Heu) Firmware

Power System S922 (9009 22g) Firmware

Power System H922 (9223 22s) Firmware

Power System S914 (9009 41g) Firmware

Power System S924 (9009 42g) Firmware

Power System H924 (9223 42s) Firmware

Power System E950 (9040 Mr9) Firmware

Power System E980 (9080 M9s) Firmware

Power System Ac922 (8335 Gth) Firmware

Power System Ac922 (8335 Gtx) Firmware

Power Hardware Management Console (7063 Cr2) Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1122 (9824 22a) Firmware	From fw1110.00 to fw1110.31
Ibm Power System S1122 (9824 22a) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1122 (9824 22a)	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1124 (9824 42a) Firmware	From fw1110.00 to fw1110.31
Ibm Power System S1124 (9824 42a) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1124 (9824 42a)	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1122s (9824 22b) Firmware	From fw1110.00 to fw1110.31
Ibm Power System S1122s (9824 22b) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1122s (9824 22b)	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1114 (9824 41b) Firmware	From fw1110.00 to fw1110.31
Ibm Power System S1114 (9824 41b) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1114 (9824 41b)	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1122 (9856 22h) Firmware	From fw1110.00 to fw1110.31
Ibm Power System L1122 (9856 22h) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System L1122 (9856 22h)	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1124 (9856 42h) Firmware	From fw1110.00 to fw1110.31
Ibm Power System L1124 (9856 42h) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System L1124 (9856 42h)	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1150 (9043 Mru) Firmware	From fw1110.00 to fw1110.31
Ibm Power System E1150 (9043 Mru) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System E1150 (9043 Mru)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1112 (9242 21b) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1112 (9242 21b)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1112 (9242 21t) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System S1112 (9242 21t)	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1080 (9080 Hex) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System E1080 (9080 Hex)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022 (9105 22a) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1022 (9105 22a)	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1024 (9105 42a) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1024 (9105 42a)	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022s (9105 22b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1022s (9105 22b)	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1014 (9105 41b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1014 (9105 41b)	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1022 (9786 22h) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System L1022 (9786 22h)	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1024 (9786 42h) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System L1024 (9786 42h)	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1050 (9043 Mrx) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System E1050 (9043 Mrx)	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1012 (9028 21b) Firmware	From fw1060.00 to fw1060.81

Running on/with	Platform Versions
Ibm Power System S1012 (9028 21b)	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1180 (9080 Heu) Firmware	From fw1110.00 to fw1110.31
Ibm Power System E1180 (9080 Heu) Firmware	Version fw1120.00

Running on/with	Platform Versions
Ibm Power System E1180 (9080 Heu)	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S922 (9009 22g) Firmware	From fw950.00 to fw950.h3
Ibm Power System S922 (9009 22g) Firmware	Version fw950.h3

Running on/with	Platform Versions
Ibm Power System S922 (9009 22g)	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System H922 (9223 22s) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System H922 (9223 22s)	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S914 (9009 41g) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System S914 (9009 41g)	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S924 (9009 42g) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System S924 (9009 42g)	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System H924 (9223 42s) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System H924 (9223 42s)	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E950 (9040 Mr9) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System E950 (9040 Mr9)	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E980 (9080 M9s) Firmware	From fw950.00 to fw950.h3

Running on/with	Platform Versions
Ibm Power System E980 (9080 M9s)	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System Ac922 (8335 Gth) Firmware	From op940 to op940.a2

Running on/with	Platform Versions
Ibm Power System Ac922 (8335 Gth)	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System Ac922 (8335 Gtx) Firmware	From op940 to op940.a2

Running on/with	Platform Versions
Ibm Power System Ac922 (8335 Gtx)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power Hardware Management Console (7063 Cr2) Firmware	From op940 to op940.82

Running on/with	Platform Versions
Ibm Power Hardware Management Console (7063 Cr2)	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://www.ibm.com/support/pages/node/7283218

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.