Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gxcw-mv6h-cx89

Опубликовано: 19 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

IBM Power Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

IBM Power Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

EPSS

Процентиль: 2%
0.00123
Низкий

8.2 High

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 8.2
nvd
около 1 месяца назад

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

EPSS

Процентиль: 2%
0.00123
Низкий

8.2 High

CVSS3

Дефекты

CWE-121