IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
Low
Partial disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 41
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1122_\(9824-22a\)
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1124_\(9824-42a\)
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1122s_\(9824-22b\)
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1114_\(9824-41b\)
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_L1122_\(9856-22h\)
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_L1124_\(9856-42h\)
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_E1150_\(9043-Mru\)
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1112_\(9242-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1112_\(9242-21b\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1112_\(9242-21t\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1112_\(9242-21t\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1022_\(9105-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1022_\(9105-22a\)
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1024_\(9105-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1024_\(9105-42a\)
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1022s_\(9105-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1022s_\(9105-22b\)
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1014_\(9105-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1014_\(9105-41b\)
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1022_\(9786-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_L1022_\(9786-22h\)
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1024_\(9786-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_L1024_\(9786-42h\)
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1050_\(9043-Mrx\)_Firmware
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_E1050_\(9043-Mrx\)
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1012_\(9028-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1012_\(9028-21b\)
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
|
— | — |