IBM Power Systems Firmware vulnerabilities

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware (FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2) is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in confidentiality, integrity, and availability impact.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in host firmware configuration parsing, allowing an attacker with service access to FSP to cause memory corruption during IPL, compromising boot stack and hypervisor.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to read/write arbitrary Hostboot memory, compromising boot stack and hypervisor.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to overflow host firmware runtime attribute storage, enabling arbitrary code execution in runtime.

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 has a vulnerability in the host firmware boot process image validation path, allowing an attacker with service access to supply a malicious code update image, enabling arbitrary code execution on the host.

IBM Power Systems Firmware FW1060.00 through FW1060.81 has a vulnerability in the service processor mailbox interface, allowing an attacker with service access to FSP to overflow host firmware runtime attribute storage, enabling arbitrary code execution in runtime.

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.

IBM Power Systems Firmware versions FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denial of service by exhausting connection resources due to improper resource management.

IBM Power Systems Firmware in specific versions has a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code execution in the partition firmware and compromising everything subsequently loaded by that partition.

IBM Power Systems Firmware in specific versions has a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition performing a network boot can prevent that partition from completing its boot sequence, and if secure boot is not enabled, can substitute the boot image, compromising everything subsequently loaded.

IBM Power Systems Firmware in specific versions has a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions.

IBM Power Systems Firmware in specific versions has a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption, requiring operator intervention to restore normal operation.

IBM Power Systems Firmware in specific versions has a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions.

IBM Power Systems Firmware (FW1120.00, FW1110.00-FW1110.30, FW1060.00-FW1060.80, FW950.00-FW950.H2) is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visit a crafted web page can, under specific conditions, silently perform administrative actions on the FSP on behalf of that administrator.

IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code execution on the host system, giving full control over the host and all hosted partitions.

IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions.

Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this to execute arbitrary code in the host firmware runtime, giving full control over the managed system.

IBM Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it.

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to the FSP can place the managed system into a non-production operational mode, allowing certain system components to be disabled. This condition persists across FSP resets and requires explicit operator intervention — clearing the affected configuration — to restore normal operation. Successful exploitation results in an availability impact to the managed system.

IBM Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host and all hosted partitions.

IBM Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system.

IBM Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface.