Ad

CVE-2026-18857

LOW CVSS 3.1: 3,4 EPSS 0.11%
Обновлено 30 сентября 2026
IBM
Параметр Значение
CVSS 3,4 (LOW)
Уязвимые версии fw1060.00 — fw1120.02
Устранено в версии fw1110.32
Тип уязвимости CWE-125 (Чтение за пределами буфера)
Поставщик IBM
Публичный эксплойт Нет

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Характеристики атаки

Способ атаки
Локальный
Нужен локальный доступ
Сложность
Низкая
Легко эксплуатировать
Нужны права
Высокие
Нужны права администратора
Участие пользователя
Не требуется
Не нужно действие пользователя

Последствия

Конфиденциальность
Низкое
Частичная утечка данных
Целостность
Нет
Нет модификации данных
Доступность
Низкое
Частичное нарушение работы

Строка CVSS v3.1

Уязвимые продукты 41

Конфигурация От (включительно) До (исключительно)
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1122_\(9824-22a\)
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1124_\(9824-42a\)
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1122s_\(9824-22b\)
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1114_\(9824-41b\)
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_L1122_\(9856-22h\)
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_L1124_\(9856-42h\)
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
fw1110.00 fw1110.32
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_E1150_\(9043-Mru\)
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1112_\(9242-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1112_\(9242-21b\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1112_\(9242-21t\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:*:*:*:*:*:*:*:*
fw1120.00 fw1120.02
Ibm Power_System_S1112_\(9242-21t\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1022_\(9105-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_S1022_\(9105-22a\)
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1024_\(9105-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_S1024_\(9105-42a\)
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1022s_\(9105-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_S1022s_\(9105-22b\)
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1014_\(9105-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_S1014_\(9105-41b\)
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_L1022_\(9786-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_L1022_\(9786-22h\)
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_L1024_\(9786-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_L1024_\(9786-42h\)
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_E1050_\(9043-Mrx\)_Firmware
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_E1050_\(9043-Mrx\)
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
— —
Ibm Power_System_S1012_\(9028-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
fw1060.00 fw1060.82
Ibm Power_System_S1012_\(9028-21b\)
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
— —