CVE-2026-16697

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length. The vulnerability involves processing input of improper length.

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception. The vulnerability involves improper error handling.

A vulnerability in IBM Power Systems Firmware (versions FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82) stems from improper handling of uninitialized resources. A remote attacker could exploit this to cause a denial of service.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in host firmware configuration parsing, allowing an attacker with service access to FSP to cause memory corruption during IPL, compromising boot stack and hypervisor.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to read/write arbitrary Hostboot memory, compromising boot stack and hypervisor.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to overflow host firmware runtime attribute storage, enabling arbitrary code execution in runtime.

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 has a vulnerability in the host firmware boot process image validation path, allowing an attacker with service access to supply a malicious code update image, enabling arbitrary code execution on the host.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to overflow host firmware runtime attribute storage, enabling arbitrary code execution in runtime.