CVE-2026-17494
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: psirt@us.ibm.com (Secondary)
Description
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Affected (18)
Products: Ibm: Power System S1122 (9824 22a) Firmware, Power System S1124 (9824 42a) Firmware, Power System S1122s (9824 22b) Firmware, Power System S1114 (9824 41b) Firmware, Power System L1122 (9856 22h) Firmware, Power System L1124 (9856 42h) Firmware, Power System E1150 (9043 Mru) Firmware, Power System S1112 (9242 21b) Firmware, Power System S1112 (9242 21t) Firmware, Power System E1180 (9080 Heu) Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1122 (9824 22a) | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1124 (9824 42a) | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1122s (9824 22b) | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1114 (9824 41b) | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System L1122 (9856 22h) | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System L1124 (9856 42h) | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System E1150 (9043 Mru) | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version fw1120.00 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1112 (9242 21b) | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version fw1120.00 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S1112 (9242 21t) | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From fw1110.00 to fw1110.31 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System E1180 (9080 Heu) | All versions |
References (1)
Timeline
No history available yet.