NetSight
critical9.1

CVE-2021-20487

IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host fi…

Impact

IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature verification process.

Affected products

VendorProductAffected versions
IbmPower9 System Firmware
from fw930.00 before fw930.30
from fw940.00 before fw940.20
before fw950.00
IbmScale-Out Lc System Firmware
before op940.20

Weakness classification

References