Description
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory corruption during system initialisation, resulting in an integrity and availability impact to the managed system.
Affected products
ibm: power system s1122 \(9824-22a\) firmware; ibm: power system s1122 \(9824-22a\); ibm: power system s1124 \(9824-42a\) firmware; ibm: power system s1124 \(9824-42a\); ibm: power system s1122s \(9824-22b\) firmware; ibm: power system s1122s \(9824-22b\); ibm: power system s1114 \(9824-41b\) firmware; ibm: power system s1114 \(9824-41b\); ibm: power system l1122 \(9856-22h\) firmware; ibm: power system l1122 \(9856-22h\); ibm: power system l1124 \(9856-42h\) firmware; ibm: power system l1124 \(9856-42h\); ibm: power system e1150 \(9043-mru\) firmware; ibm: power system e1150 \(9043-mru\); ibm: power system s1112 \(9242-21b\) firmware
References1
- www.ibm.com/support/pages/node/7283238 Vendor Advisory
Metrics
- CVSS 3.1
-
7.3
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H - EPSS — exploit probability
- 0% percentile: 3 · as of 10 November 2026
- CWE
- CWE-121
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.