CVE-2026-16687

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware in specific versions has a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code execution in the partition firmware and compromising everything subsequently loaded by that partition.

IBM Power Systems Firmware in specific versions has a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition performing a network boot can prevent that partition from completing its boot sequence, and if secure boot is not enabled, can substitute the boot image, compromising everything subsequently loaded.

IBM Power Systems Firmware in specific versions has a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions.

IBM Power Systems Firmware in specific versions has a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption, requiring operator intervention to restore normal operation.

IBM Power Systems Firmware in specific versions has a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions.

IBM Power Systems Firmware (FW1120.00, FW1110.00-FW1110.30, FW1060.00-FW1060.80, FW950.00-FW950.H2) is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visit a crafted web page can, under specific conditions, silently perform administrative actions on the FSP on behalf of that administrator.

IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code execution on the host system, giving full control over the host and all hosted partitions.

IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions.

Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this to execute arbitrary code in the host firmware runtime, giving full control over the managed system.