CRITICAL🇬🇧 English

CVE-2026-16835

CVSS 9.6v3.1pub. 2026-08-19upd. 2026-08-25

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
  • IBM Power System E1080 \(9080 Hex\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System E1080 \(9080 Hex\) Firmware

    OS
    Ibm
    fw1060.00 – fw1060.81 (bez)
  • IBM Power System E1180 \(9080 Heu\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System E1180 \(9080 Heu\) Firmware

    OS
    Ibm
    fw1120.00fw1110.00 – fw1110.31 (bez)
  • IBM Power System E950 \(9040 Mr9\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System E950 \(9040 Mr9\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System E980 \(9080 M9s\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System E980 \(9080 M9s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System H922 \(9223 22s\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System H922 \(9223 22s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System H924 \(9223 42s\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System H924 \(9223 42s\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System S914 \(9009 41g\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System S914 \(9009 41g\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System S922 \(9009 22g\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System S922 \(9009 22g\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
  • IBM Power System S924 \(9009 42g\)

    HW
    Ibm
    wszystkie wersje
  • IBM Power System S924 \(9009 42g\) Firmware

    OS
    Ibm
    fw950.00 – fw950.h3 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth BypassDoS
CWE
Referencje

Powiązane podatności

CVE-2026-16687CRITICAL9.6ten sam produkt

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 t...

CVE-2024-45656CRITICAL9.8PL ✓ten sam produkt

Statyczne poświadczenia w IBM Flexible Service Processor umożliwiają eskalację uprawnień

CVE-2026-16707HIGH8.2ten sam produkt

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu...

CVE-2026-16661HIGH8.2ten sam produkt

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu...

CVE-2026-16828HIGH7.6ten sam produkt

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 t...