CVE-2026-18857

Published: Sep 24, 2026Modified: Sep 30, 2026

3.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

Exploitability: 0.8 / Impact: 2.5

Source: psirt@us.ibm.com (Secondary)

Description

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Affected (24)

Ibm

17 products

Power System S1122 (9824 22a) Firmware

Power System S1124 (9824 42a) Firmware

Power System S1122s (9824 22b) Firmware

Power System S1114 (9824 41b) Firmware

Power System L1122 (9856 22h) Firmware

Power System L1124 (9856 42h) Firmware

Power System E1150 (9043 Mru) Firmware

Power System S1112 (9242 21b) Firmware

Power System S1112 (9242 21t) Firmware

Power System S1022 (9105 22a) Firmware

Power System S1024 (9105 42a) Firmware

Power System S1022s (9105 22b) Firmware

Power System S1014 (9105 41b) Firmware

Power System L1022 (9786 22h) Firmware

Power System L1024 (9786 42h) Firmware

Power System E1050 (9043 Mrx) Firmware

Power System S1012 (9028 21b) Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1122 (9824 22a) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System S1122 (9824 22a) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1122 (9824 22a)	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1124 (9824 42a) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System S1124 (9824 42a) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1124 (9824 42a)	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1122s (9824 22b) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System S1122s (9824 22b) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1122s (9824 22b)	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1114 (9824 41b) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System S1114 (9824 41b) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1114 (9824 41b)	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1122 (9856 22h) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System L1122 (9856 22h) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System L1122 (9856 22h)	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1124 (9856 42h) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System L1124 (9856 42h) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System L1124 (9856 42h)	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1150 (9043 Mru) Firmware	fw1110.00 ≤ version < fw1110.32
Ibm Power System E1150 (9043 Mru) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System E1150 (9043 Mru)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1112 (9242 21b) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1112 (9242 21b)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1112 (9242 21t) Firmware	fw1120.00 ≤ version < fw1120.02

Running on/with	Platform Versions
Ibm Power System S1112 (9242 21t)	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022 (9105 22a) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System S1022 (9105 22a)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1024 (9105 42a) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System S1024 (9105 42a)	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1022s (9105 22b) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System S1022s (9105 22b)	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1014 (9105 41b) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System S1014 (9105 41b)	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1022 (9786 22h) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System L1022 (9786 22h)	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System L1024 (9786 42h) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System L1024 (9786 42h)	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System E1050 (9043 Mrx) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System E1050 (9043 Mrx)	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S1012 (9028 21b) Firmware	fw1060.00 ≤ version < fw1060.82

Running on/with	Platform Versions
Ibm Power System S1012 (9028 21b)	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.ibm.com/support/pages/node/7289253

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.