Ibm Power System E1150 (9043-mru) Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Power System E1150 (9043-mru) Firmware: 32 record(s), with affected versions and fixes.
cpe:2.3:o:ibm:power_system_e1150_(9043-mru)_firmware

CVE-2026-16930 High · 8.2 CWE-862 Aug 19, 2026

Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

CVE-2026-19234 High · 8.2 CWE-121 Aug 19, 2026

Power System Buffer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

CVE-2026-15961 Medium · 6.0 CWE-134 Aug 19, 2026

Power System Information Disclosure

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings.

CVE-2026-11885 High · 8.4 CWE-120 Jul 30, 2026

Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.

CVE-2026-4932 Medium · 4.6 CWE-331 Jul 28, 2026

This Power System update is being released to address Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.

CVE-2026-8058 Medium · 4.9 CWE-200 Jul 28, 2026

This Power System update is being released to address a sensitive information disclosure

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

CVE-2026-7868 High · 8.8 CWE-863 Jul 28, 2026

This Power System update is being released to address incorrect authorization

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.