Power System Buffer Overflow
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Power Systems Firmware | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ibm | Power Systems Firmware |
|
Vendor Solution
Customers with the products below should install FW1110.31(1110_134), FW1120.01(1120_167), or newer to remediate this vulnerability. Power 11 * IBM Power System E1180 (9080-HEU) Customers with the products below should install FW1110.31(1110_155), FW1120.01(1120_190), or newer to remediate this vulnerability. Power 11 * IBM Power System S1122 (9824-22A) * IBM Power System S1124 (9824-42A) * IBM Power System S1122s (9824-22B) * IBM Power System S1114 (9824-41B) * IBM Power System L1122 (9856-22H) * IBM Power System L1124 (9856-42H) * IBM Power System E1150 (9043-MRU) Customers with the products below should install FW1120.01(1120_190), or newer to remediate this vulnerability. Power 11 * IBM Power System S1112 (9242-21B, 9242-21T) The images mentioned above can be located at IBM Fix Central : https://www.ibm.com/support/fixcentral/ https://www.ibm.com/support/fixcentral/
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.169% probability within 30 days)
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7283220 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm power System E1150 \(9043-mru\)
Ibm power System E1150 \(9043-mru\) Firmware Ibm power System E1180 \(9080-heu\) Ibm power System E1180 \(9080-heu\) Firmware Ibm power System L1122 \(9856-22h\) Ibm power System L1122 \(9856-22h\) Firmware Ibm power System L1124 \(9856-42h\) Ibm power System L1124 \(9856-42h\) Firmware Ibm power System S1112 \(9242-21b\) Ibm power System S1112 \(9242-21b\) Firmware Ibm power System S1112 \(9242-21t\) Ibm power System S1112 \(9242-21t\) Firmware Ibm power System S1114 \(9824-41b\) Ibm power System S1114 \(9824-41b\) Firmware Ibm power System S1122 \(9824-22a\) Ibm power System S1122 \(9824-22a\) Firmware Ibm power System S1122s \(9824-22b\) Ibm power System S1122s \(9824-22b\) Firmware Ibm power System S1124 \(9824-42a\) Ibm power System S1124 \(9824-42a\) Firmware |
|
| CPEs | cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_e1180_\(9080-heu\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:* cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:fw1120.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:fw1120.00:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm power System E1150 \(9043-mru\)
Ibm power System E1150 \(9043-mru\) Firmware Ibm power System E1180 \(9080-heu\) Ibm power System E1180 \(9080-heu\) Firmware Ibm power System L1122 \(9856-22h\) Ibm power System L1122 \(9856-22h\) Firmware Ibm power System L1124 \(9856-42h\) Ibm power System L1124 \(9856-42h\) Firmware Ibm power System S1112 \(9242-21b\) Ibm power System S1112 \(9242-21b\) Firmware Ibm power System S1112 \(9242-21t\) Ibm power System S1112 \(9242-21t\) Firmware Ibm power System S1114 \(9824-41b\) Ibm power System S1114 \(9824-41b\) Firmware Ibm power System S1122 \(9824-22a\) Ibm power System S1122 \(9824-22a\) Firmware Ibm power System S1122s \(9824-22b\) Ibm power System S1122s \(9824-22b\) Firmware Ibm power System S1124 \(9824-42a\) Ibm power System S1124 \(9824-42a\) Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Power Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact. | IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact. |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Power Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact. | |
| Title | Power System Buffer Overflow | |
| First Time appeared |
Ibm
Ibm power Systems Firmware |
|
| Weaknesses | CWE-121 | |
| CPEs | cpe:2.3:o:ibm:power_systems_firmware:fw1110.00:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_systems_firmware:fw1110.30:*:*:*:*:*:*:* cpe:2.3:o:ibm:power_systems_firmware:fw1120.00:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm power Systems Firmware |
|
| References |
| |
| Metrics |
cvssV3_1
|