Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.
Metrics
CVSS 3.1 8.2/10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IBM | Power Systems Firmware | FW1120.00; >= FW1110.00, <= FW1110.30; >= FW1060.00, <= FW1060.80; >= FW950.00, <= FW950.H2; >= OP940.00, <= OP940.a1; >= OP940.00, <= OP940.81 |
References
- https://www.ibm.com/support/pages/node/7283236Vendor Advisory
Timeline
- Published
- Aug 19, 2026
- Last modified
- Aug 25, 2026
- NVD status
- Analyzed