Description
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code to be executed in the partition firmware and compromising everything subsequently loaded by that partition. Other partitions and the managed system are not affected. Only partitions actively performing a network boot are affected, resulting in a confidentiality, integrity, and availability impact.
Affected products
ibm: power system s1122 \(9824-22a\) firmware; ibm: power system s1122 \(9824-22a\); ibm: power system s1124 \(9824-42a\) firmware; ibm: power system s1124 \(9824-42a\); ibm: power system s1122s \(9824-22b\) firmware; ibm: power system s1122s \(9824-22b\); ibm: power system s1114 \(9824-41b\) firmware; ibm: power system s1114 \(9824-41b\); ibm: power system l1122 \(9856-22h\) firmware; ibm: power system l1122 \(9856-22h\); ibm: power system l1124 \(9856-42h\) firmware; ibm: power system l1124 \(9856-42h\); ibm: power system e1150 \(9043-mru\) firmware; ibm: power system e1150 \(9043-mru\); ibm: power system s1112 \(9242-21b\) firmware
References1
- www.ibm.com/support/pages/node/7283232 Vendor Advisory
Metrics
- CVSS 3.1
-
8.8
HIGH
Score source: NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 21 · as of 10 November 2026
- CWE
- CWE-787
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.