HIGH🇬🇧 English

CVE-2026-16707

CVSS 8.2v3.1pub. 2026-08-19upd. 2026-08-25

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • IBM Power System E1050 \(9043 Mrx\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E1050 \(9043 Mrx\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System E1080 \(9080 Hex\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E1080 \(9080 Hex\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System E1150 \(9043 Mru\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E1150 \(9043 Mru\) Firmware

    OS
    Ibm
    fw1120.00fw1110.00 – fw1110.31 (bez)

  • IBM Power System E1180 \(9080 Heu\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E1180 \(9080 Heu\) Firmware

    OS
    Ibm
    fw1120.00fw1110.00 – fw1110.31 (bez)

  • IBM Power System E950 \(9040 Mr9\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E950 \(9040 Mr9\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)

  • IBM Power System E980 \(9080 M9s\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System E980 \(9080 M9s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)

  • IBM Power System H922 \(9223 22s\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System H922 \(9223 22s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)

  • IBM Power System H924 \(9223 42s\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System H924 \(9223 42s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)

  • IBM Power System L1022 \(9786 22h\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System L1022 \(9786 22h\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System L1024 \(9786 42h\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System L1024 \(9786 42h\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System L1122 \(9856 22h\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System L1122 \(9856 22h\) Firmware

    OS
    Ibm
    fw1120.00fw1110.00 – fw1110.31 (bez)

  • IBM Power System L1124 \(9856 42h\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System L1124 \(9856 42h\) Firmware

    OS
    Ibm
    fw1120.00fw1110.00 – fw1110.31 (bez)

  • IBM Power System S1012 \(9028 21b\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System S1012 \(9028 21b\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System S1014 \(9105 41b\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System S1014 \(9105 41b\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)

  • IBM Power System S1022 \(9105 22a\)

    HW
    Ibm
    wszystkie wersje

  • IBM Power System S1022 \(9105 22a\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2026-16835CRITICAL9.6ten sam produkt

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 t...

CVE-2026-16687CRITICAL9.6ten sam produkt

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 t...

CVE-2024-45656CRITICAL9.8PL ✓ten sam produkt

Statyczne poświadczenia w IBM Flexible Service Processor umożliwiają eskalację uprawnień

CVE-2026-16828HIGH7.6ten sam produkt

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 t...

CVE-2026-16661HIGH8.2ten sam produkt

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu...