Vulnerability-Lookup

CVE-2026-18857 (GCVE-0-2026-18857)

Vulnerability from cvelistv5 – Published: 2026-09-24 14:13 – Updated: 2026-09-24 14:54

Title

This Power System update is being released to address

Summary

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Severity

3.4 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-24 14:54 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1289 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7289253	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version	CPE status
IBM	OPENBMC	Affected: FW1120.00 , ≤ FW1120.01 (semver) Affected: FW1110.00 , ≤ FW1110.31 (semver) Affected: FW1060.00 , ≤ FW1060.81 (semver) cpe:2.3:a:ibm:openbmc:fw1120.00:::::::* cpe:2.3:a:ibm:openbmc:fw1120.00.0:::::::* cpe:2.3:a:ibm:openbmc:fw1120.01:::::::* cpe:2.3:a:ibm:openbmc:fw1120.01.0:::::::* cpe:2.3:a:ibm:openbmc:fw1110.00:::::::* cpe:2.3:a:ibm:openbmc:fw1110.00.0:::::::* cpe:2.3:a:ibm:openbmc:fw1110.31:::::::* cpe:2.3:a:ibm:openbmc:fw1110.31.0:::::::* cpe:2.3:a:ibm:openbmc:fw1060.00:::::::* cpe:2.3:a:ibm:openbmc:fw1060.00.0:::::::* cpe:2.3:a:ibm:openbmc:fw1060.81:::::::* cpe:2.3:a:ibm:openbmc:fw1060.81.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18857",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T14:54:25.176870Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T14:54:35.705Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:openbmc:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*"
          ],
          "product": "OPENBMC",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "FW1120.01",
              "status": "affected",
              "version": "FW1120.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1110.31",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.81",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.\u003c/p\u003e"
            }
          ],
          "value": "IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T14:13:50.386Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7289253"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers with the products below should install FW1120.02(1120_195), FW1110.32(1110_160) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 11\u003cbr/\u003e1) IBM Power System S1122 (9824-22A)\u003cbr/\u003e2) IBM Power System S1124 (9824-42A)\u003cbr/\u003e3) IBM Power System S1122s (9824-22B)\u003cbr/\u003e4) IBM Power System S1114 (9824-41B)\u003cbr/\u003e5) IBM Power System L1122 (9856-22H)\u003cbr/\u003e6) IBM Power System L1124 (9856-42H)\u003cbr/\u003e7) IBM Power System E1150 (9043-MRU)\u003cbr/\u003e8) IBM Power System S1112 (9242-21B, 9242-21T)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System S1022 (9105-22A)\u003cbr/\u003e2) IBM Power System S1024 (9105-42A)\u003cbr/\u003e3) IBM Power System S1022s (9105-22B)\u003cbr/\u003e4) IBM Power System S1014 (9105-41B)\u003cbr/\u003e5) IBM Power System L1022 (9786-22H)\u003cbr/\u003e6) IBM Power System L1024 (9786-42H)\u003cbr/\u003e7) IBM Power System E1050 (9043-MRX)\u003cbr/\u003e8) IBM Power System S1012 (9028-21B)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central : \u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers with the products below should install FW1120.02(1120_195), FW1110.32(1110_160) or newer to remediate this vulnerability.\n\n\n\nPower 11\n1) IBM Power System S1122 (9824-22A)\n2) IBM Power System S1124 (9824-42A)\n3) IBM Power System S1122s (9824-22B)\n4) IBM Power System S1114 (9824-41B)\n5) IBM Power System L1122 (9856-22H)\n6) IBM Power System L1124 (9856-42H)\n7) IBM Power System E1150 (9043-MRU)\n8) IBM Power System S1112 (9242-21B, 9242-21T)\n\n\n\nCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\n\n\n\nPower 10\n1) IBM Power System S1022 (9105-22A)\n2) IBM Power System S1024 (9105-42A)\n3) IBM Power System S1022s (9105-22B)\n4) IBM Power System S1014 (9105-41B)\n5) IBM Power System L1022 (9786-22H)\n6) IBM Power System L1024 (9786-42H)\n7) IBM Power System E1050 (9043-MRX)\n8) IBM Power System S1012 (9028-21B)\n\n\n\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/"
        }
      ],
      "title": "This Power System update is being released to address",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOnly install system firmware from trusted sources.\u003c/p\u003e"
            }
          ],
          "value": "Only install system firmware from trusted sources."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-18857",
    "datePublished": "2026-09-24T14:13:50.386Z",
    "dateReserved": "2026-08-04T16:01:27.817Z",
    "dateUpdated": "2026-09-24T14:54:35.705Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-18857",
      "date": "2026-10-25",
      "epss": "0.00107",
      "percentile": "0.01122"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:ibm:openbmc:fw1120.00:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1120.00.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1120.01:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1120.01.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1110.31:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1110.31.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
                  "cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*"
                ],
                "product": "OPENBMC",
                "vendor": "IBM",
                "versions": [
                  {
                    "lessThanOrEqual": "FW1120.01",
                    "status": "affected",
                    "version": "FW1120.00",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "FW1110.31",
                    "status": "affected",
                    "version": "FW1110.00",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "FW1060.81",
                    "status": "affected",
                    "version": "FW1060.00",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "psirt@us.ibm.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7EA43BB6-6776-4E2F-A279-E30E844EF1C2",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EC2FA374-2ADB-45C1-ACA1-D39BAD709067",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1122_\\(9824-22a\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "96C2DEDC-012D-4B9F-B9DF-344A49B67E46",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F9475E71-FA18-43A1-902A-2E21C777D254",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A66F38F0-55B5-444F-968D-718170852B0A",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1124_\\(9824-42a\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3F51514A-8E29-42D1-B874-838F8A0869D2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D11BE622-6276-49D9-B394-EB615E3C5BFD",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E9E20EAA-BBEE-4924-9BBA-07D6DE018509",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1122s_\\(9824-22b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26E1E16B-8F95-46EC-BAA0-0A53F332292B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B7048C65-6872-4F5B-9691-D74E269E1CF9",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "96EEE277-E80A-4380-A4C4-9E2CCF6E8C52",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1114_\\(9824-41b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8688E552-BE38-4EB9-8514-D7060C548C39",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB22063C-C9A0-4D69-95FC-3B19ACDC6B21",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76154775-CAE7-43F1-A14D-CA092F5539D1",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_l1122_\\(9856-22h\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3C8998E4-5EA9-4C7E-BF59-644CB78D00D2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "82AEF0FF-068C-4123-BEFB-7D3584F1B15A",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "82BC7AD7-3F24-4EE7-9360-4024A6CC319C",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_l1124_\\(9856-42h\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3FB6FA2C-70A5-4F19-B64B-7502D20CFE5C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57896A45-2625-4C51-9B3E-5B934979FA33",
                    "versionEndExcluding": "fw1110.32",
                    "versionStartIncluding": "fw1110.00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4AB43439-0F5B-4839-A109-E14E726CAD27",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_e1150_\\(9043-mru\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC9D9EFF-1E92-4894-9976-001227F78869",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F95F4E4A-7374-40FB-AC3B-AEF7AE607CEF",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B3F5100A-FE2A-412C-9B57-B616B97B1142",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21t\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D79F90A7-5929-4893-BC72-4CF11BDB4F9D",
                    "versionEndExcluding": "fw1120.02",
                    "versionStartIncluding": "fw1120.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21t\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EA825307-2083-4264-8E8B-798661285261",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1022_\\(9105-22a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8E228E48-523F-4486-8A29-5DB61851B1F3",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1022_\\(9105-22a\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3E15C41-9CBD-4F66-A176-07B3E9BBD81D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1024_\\(9105-42a\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "38AE73EA-12AE-4E46-8435-259AD1773403",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1024_\\(9105-42a\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E49EE658-B8AE-48F7-A765-92BA3A630AA0",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1022s_\\(9105-22b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DD0351D8-3E79-4A28-BC5E-ADD9551238BB",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1022s_\\(9105-22b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "564A665A-7B94-40CE-A4D9-CDD0CCF52B2E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1014_\\(9105-41b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C5578070-8EEC-4A76-A07F-5094DCF69A49",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1014_\\(9105-41b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ECD54B80-5754-4C19-AE0C-F539DEF96DCB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1022_\\(9786-22h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7097B3B4-A5BF-4B60-8FAA-6D8D4BA1A44E",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_l1022_\\(9786-22h\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B2C09090-C18F-464A-8DEF-E23B5990E2A4",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_l1024_\\(9786-42h\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1E9CBB70-ACFC-4904-8CFB-16D3672FE3CA",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_l1024_\\(9786-42h\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0170400B-89A7-4B44-9AA7-9A168C9CAE9C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_e1050_\\(9043-mrx\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA91958A-CDF9-4360-8886-00E38A8B7366",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_e1050_\\(9043-mrx\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "061D193E-84BC-4DE7-96C4-B75D11769ED5",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:ibm:power_system_s1012_\\(9028-21b\\)_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F1D438E-4AFC-4BAC-AD5B-B6152FFEA821",
                    "versionEndExcluding": "fw1060.82",
                    "versionStartIncluding": "fw1060.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:ibm:power_system_s1012_\\(9028-21b\\):-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7BED85F2-8CCB-417C-A739-23828966A036",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system."
          }
        ],
        "id": "CVE-2026-18857",
        "lastModified": "2026-09-30T16:48:23.090",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.4,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 2.5,
              "source": "psirt@us.ibm.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-18857",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T14:54:25.176870Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-09-24T14:17:12.680",
        "references": [
          {
            "source": "psirt@us.ibm.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.ibm.com/support/pages/node/7289253"
          }
        ],
        "sourceIdentifier": "psirt@us.ibm.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-125"
              }
            ],
            "source": "psirt@us.ibm.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-18857",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-24T14:54:25.176870Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-24T14:54:32.042Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:ibm:openbmc:fw1120.00:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1120.00.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1120.01:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1120.01.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1110.31:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1110.31.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
                "cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*"
              ],
              "product": "OPENBMC",
              "vendor": "IBM",
              "versions": [
                {
                  "lessThanOrEqual": "FW1120.01",
                  "status": "affected",
                  "version": "FW1120.00",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "FW1110.31",
                  "status": "affected",
                  "version": "FW1110.00",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "FW1060.81",
                  "status": "affected",
                  "version": "FW1060.00",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eIBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.\u003c/p\u003e"
                }
              ],
              "value": "IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.4,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "CWE-125 Out-of-bounds Read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-24T14:13:50.386Z",
            "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
            "shortName": "ibm"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory",
                "patch"
              ],
              "url": "https://www.ibm.com/support/pages/node/7289253"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCustomers with the products below should install FW1120.02(1120_195), FW1110.32(1110_160) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 11\u003cbr/\u003e1) IBM Power System S1122 (9824-22A)\u003cbr/\u003e2) IBM Power System S1124 (9824-42A)\u003cbr/\u003e3) IBM Power System S1122s (9824-22B)\u003cbr/\u003e4) IBM Power System S1114 (9824-41B)\u003cbr/\u003e5) IBM Power System L1122 (9856-22H)\u003cbr/\u003e6) IBM Power System L1124 (9856-42H)\u003cbr/\u003e7) IBM Power System E1150 (9043-MRU)\u003cbr/\u003e8) IBM Power System S1112 (9242-21B, 9242-21T)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System S1022 (9105-22A)\u003cbr/\u003e2) IBM Power System S1024 (9105-42A)\u003cbr/\u003e3) IBM Power System S1022s (9105-22B)\u003cbr/\u003e4) IBM Power System S1014 (9105-41B)\u003cbr/\u003e5) IBM Power System L1022 (9786-22H)\u003cbr/\u003e6) IBM Power System L1024 (9786-42H)\u003cbr/\u003e7) IBM Power System E1050 (9043-MRX)\u003cbr/\u003e8) IBM Power System S1012 (9028-21B)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central : \u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e"
                }
              ],
              "value": "Customers with the products below should install FW1120.02(1120_195), FW1110.32(1110_160) or newer to remediate this vulnerability.\n\n\n\nPower 11\n1) IBM Power System S1122 (9824-22A)\n2) IBM Power System S1124 (9824-42A)\n3) IBM Power System S1122s (9824-22B)\n4) IBM Power System S1114 (9824-41B)\n5) IBM Power System L1122 (9856-22H)\n6) IBM Power System L1124 (9856-42H)\n7) IBM Power System E1150 (9043-MRU)\n8) IBM Power System S1112 (9242-21B, 9242-21T)\n\n\n\nCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\n\n\n\nPower 10\n1) IBM Power System S1022 (9105-22A)\n2) IBM Power System S1024 (9105-42A)\n3) IBM Power System S1022s (9105-22B)\n4) IBM Power System S1014 (9105-41B)\n5) IBM Power System L1022 (9786-22H)\n6) IBM Power System L1024 (9786-42H)\n7) IBM Power System E1050 (9043-MRX)\n8) IBM Power System S1012 (9028-21B)\n\n\n\nThe images mentioned above can be located at IBM Fix Central :  https://www.ibm.com/support/fixcentral/"
            }
          ],
          "title": "This Power System update is being released to address",
          "workarounds": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eOnly install system firmware from trusted sources.\u003c/p\u003e"
                }
              ],
              "value": "Only install system firmware from trusted sources."
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "assignerShortName": "ibm",
        "cveId": "CVE-2026-18857",
        "datePublished": "2026-09-24T14:13:50.386Z",
        "dateReserved": "2026-08-04T16:01:27.817Z",
        "dateUpdated": "2026-09-24T14:54:35.705Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-18857

Vulnerability from fkie_nvd - Published: 2026-09-24 14:17 - Updated: 2026-09-30 16:48

Severity

3.4 (Low) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

Summary

References

	URL	Tags
	psirt@us.ibm.com	https://www.ibm.com/support/pages/node/7289253	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	power_system_s1122_\(9824-22a\)_firmware	*
ibm	power_system_s1122_\(9824-22a\)_firmware	*
ibm	power_system_s1122_\(9824-22a\)	-
ibm	power_system_s1124_\(9824-42a\)_firmware	*
ibm	power_system_s1124_\(9824-42a\)_firmware	*
ibm	power_system_s1124_\(9824-42a\)	-
ibm	power_system_s1122s_\(9824-22b\)_firmware	*
ibm	power_system_s1122s_\(9824-22b\)_firmware	*
ibm	power_system_s1122s_\(9824-22b\)	-
ibm	power_system_s1114_\(9824-41b\)_firmware	*
ibm	power_system_s1114_\(9824-41b\)_firmware	*
ibm	power_system_s1114_\(9824-41b\)	-
ibm	power_system_l1122_\(9856-22h\)_firmware	*
ibm	power_system_l1122_\(9856-22h\)_firmware	*
ibm	power_system_l1122_\(9856-22h\)	-
ibm	power_system_l1124_\(9856-42h\)_firmware	*
ibm	power_system_l1124_\(9856-42h\)_firmware	*
ibm	power_system_l1124_\(9856-42h\)	-
ibm	power_system_e1150_\(9043-mru\)_firmware	*
ibm	power_system_e1150_\(9043-mru\)_firmware	*
ibm	power_system_e1150_\(9043-mru\)	-
ibm	power_system_s1112_\(9242-21b\)_firmware	*
ibm	power_system_s1112_\(9242-21b\)	-
ibm	power_system_s1112_\(9242-21t\)_firmware	*
ibm	power_system_s1112_\(9242-21t\)	-
ibm	power_system_s1022_\(9105-22a\)_firmware	*
ibm	power_system_s1022_\(9105-22a\)	-
ibm	power_system_s1024_\(9105-42a\)_firmware	*
ibm	power_system_s1024_\(9105-42a\)	-
ibm	power_system_s1022s_\(9105-22b\)_firmware	*
ibm	power_system_s1022s_\(9105-22b\)	-
ibm	power_system_s1014_\(9105-41b\)_firmware	*
ibm	power_system_s1014_\(9105-41b\)	-
ibm	power_system_l1022_\(9786-22h\)_firmware	*
ibm	power_system_l1022_\(9786-22h\)	-
ibm	power_system_l1024_\(9786-42h\)_firmware	*
ibm	power_system_l1024_\(9786-42h\)	-
ibm	power_system_e1050_\(9043-mrx\)_firmware	*
ibm	power_system_e1050_\(9043-mrx\)	-
ibm	power_system_s1012_\(9028-21b\)_firmware	*
ibm	power_system_s1012_\(9028-21b\)	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:openbmc:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*"
          ],
          "product": "OPENBMC",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "FW1120.01",
              "status": "affected",
              "version": "FW1120.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1110.31",
              "status": "affected",
              "version": "FW1110.00",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "FW1060.81",
              "status": "affected",
              "version": "FW1060.00",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EA43BB6-6776-4E2F-A279-E30E844EF1C2",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122_\\(9824-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC2FA374-2ADB-45C1-ACA1-D39BAD709067",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1122_\\(9824-22a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96C2DEDC-012D-4B9F-B9DF-344A49B67E46",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9475E71-FA18-43A1-902A-2E21C777D254",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1124_\\(9824-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A66F38F0-55B5-444F-968D-718170852B0A",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1124_\\(9824-42a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F51514A-8E29-42D1-B874-838F8A0869D2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D11BE622-6276-49D9-B394-EB615E3C5BFD",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1122s_\\(9824-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9E20EAA-BBEE-4924-9BBA-07D6DE018509",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1122s_\\(9824-22b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "26E1E16B-8F95-46EC-BAA0-0A53F332292B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7048C65-6872-4F5B-9691-D74E269E1CF9",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1114_\\(9824-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "96EEE277-E80A-4380-A4C4-9E2CCF6E8C52",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1114_\\(9824-41b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8688E552-BE38-4EB9-8514-D7060C548C39",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB22063C-C9A0-4D69-95FC-3B19ACDC6B21",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1122_\\(9856-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76154775-CAE7-43F1-A14D-CA092F5539D1",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1122_\\(9856-22h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C8998E4-5EA9-4C7E-BF59-644CB78D00D2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "82AEF0FF-068C-4123-BEFB-7D3584F1B15A",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1124_\\(9856-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "82BC7AD7-3F24-4EE7-9360-4024A6CC319C",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1124_\\(9856-42h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FB6FA2C-70A5-4F19-B64B-7502D20CFE5C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57896A45-2625-4C51-9B3E-5B934979FA33",
              "versionEndExcluding": "fw1110.32",
              "versionStartIncluding": "fw1110.00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1150_\\(9043-mru\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AB43439-0F5B-4839-A109-E14E726CAD27",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1150_\\(9043-mru\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC9D9EFF-1E92-4894-9976-001227F78869",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F95F4E4A-7374-40FB-AC3B-AEF7AE607CEF",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3F5100A-FE2A-412C-9B57-B616B97B1142",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1112_\\(9242-21t\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D79F90A7-5929-4893-BC72-4CF11BDB4F9D",
              "versionEndExcluding": "fw1120.02",
              "versionStartIncluding": "fw1120.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1112_\\(9242-21t\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA825307-2083-4264-8E8B-798661285261",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1022_\\(9105-22a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E228E48-523F-4486-8A29-5DB61851B1F3",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022_\\(9105-22a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3E15C41-9CBD-4F66-A176-07B3E9BBD81D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1024_\\(9105-42a\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38AE73EA-12AE-4E46-8435-259AD1773403",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1024_\\(9105-42a\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E49EE658-B8AE-48F7-A765-92BA3A630AA0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1022s_\\(9105-22b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD0351D8-3E79-4A28-BC5E-ADD9551238BB",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1022s_\\(9105-22b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "564A665A-7B94-40CE-A4D9-CDD0CCF52B2E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1014_\\(9105-41b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5578070-8EEC-4A76-A07F-5094DCF69A49",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1014_\\(9105-41b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECD54B80-5754-4C19-AE0C-F539DEF96DCB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1022_\\(9786-22h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7097B3B4-A5BF-4B60-8FAA-6D8D4BA1A44E",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1022_\\(9786-22h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2C09090-C18F-464A-8DEF-E23B5990E2A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_l1024_\\(9786-42h\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E9CBB70-ACFC-4904-8CFB-16D3672FE3CA",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_l1024_\\(9786-42h\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0170400B-89A7-4B44-9AA7-9A168C9CAE9C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_e1050_\\(9043-mrx\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA91958A-CDF9-4360-8886-00E38A8B7366",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_e1050_\\(9043-mrx\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "061D193E-84BC-4DE7-96C4-B75D11769ED5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:power_system_s1012_\\(9028-21b\\)_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F1D438E-4AFC-4BAC-AD5B-B6152FFEA821",
              "versionEndExcluding": "fw1060.82",
              "versionStartIncluding": "fw1060.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:power_system_s1012_\\(9028-21b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BED85F2-8CCB-417C-A739-23828966A036",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system."
    }
  ],
  "id": "CVE-2026-18857",
  "lastModified": "2026-09-30T16:48:23.090",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 3.4,
          "baseSeverity": "LOW",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 2.5,
        "source": "psirt@us.ibm.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-18857",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-24T14:54:25.176870Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-24T14:17:12.680",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7289253"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Secondary"
    }
  ]
}

GHSA-34JW-2GCW-F6V2

Vulnerability from github – Published: 2026-09-24 15:31 – Updated: 2026-09-24 15:31

Details

Severity

3.4 (Low)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-18857"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-125"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-24T14:17:12Z",
    "severity": "LOW"
  },
  "details": "IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.",
  "id": "GHSA-34jw-2gcw-f6v2",
  "modified": "2026-09-24T15:31:30Z",
  "published": "2026-09-24T15:31:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18857"
    },
    {
      "type": "WEB",
      "url": "https://www.ibm.com/support/pages/node/7289253"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-18857 (GCVE-0-2026-18857)

FKIE_CVE-2026-18857

GHSA-34JW-2GCW-F6V2

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour