Vulnerabilidades do Ibm Power System E1150 (9043-mru) Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Power System E1150 (9043-mru) Firmware: 32 registro(s), com versões afetadas e correções.
cpe:2.3:o:ibm:power_system_e1150_(9043-mru)_firmware

CVE-2026-16930 Alta · 8.2 CWE-862 19/08/2026

Power System Missing Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

CVE-2026-19234 Alta · 8.2 CWE-121 19/08/2026

Power System Buffer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

CVE-2026-15961 Média · 6.0 CWE-134 19/08/2026

Power System Information Disclosure

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings.

CVE-2026-11885 Alta · 8.4 CWE-120 30/07/2026

Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.

CVE-2026-4932 Média · 4.6 CWE-331 28/07/2026

This Power System update is being released to address Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.

CVE-2026-8058 Média · 4.9 CWE-200 28/07/2026

This Power System update is being released to address a sensitive information disclosure

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

CVE-2026-7868 Alta · 8.8 CWE-863 28/07/2026

This Power System update is being released to address incorrect authorization

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.