NetSight
high8.2

CVE-2026-17494

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system.

Impact

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

Affected products

VendorProductAffected versions
IbmPower System S1122 \(9824-22a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1124 \(9824-42a\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1122s \(9824-22b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1114 \(9824-41b\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1122 \(9856-22h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System L1124 \(9856-42h\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System E1150 \(9043-Mru\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00
IbmPower System S1112 \(9242-21b\) Firmware
Version fw1120.00
IbmPower System S1112 \(9242-21t\) Firmware
Version fw1120.00
IbmPower System E1180 \(9080-Heu\) Firmware
from fw1110.00 before fw1110.31
Version fw1120.00

Weakness classification

References