CVE-2026-16828: Power System Out-of-bounds Read
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Systems Firmware FW1060.81 (1060_184) or newerto a version that resolves this vulnerability.Fixed in FW1060.81(1060_184) - Upgrade
Upgrade
IBM Power Systems Firmware FW1120.01 (1120_167) or newerto a version that resolves this vulnerability.Fixed in FW1120.01(1120_167) - Upgrade
Upgrade
IBM Power Systems Firmware FW1110.31 (1110_134) or newerto a version that resolves this vulnerability.Fixed in FW1110.31(1110_134) - Upgrade
Upgrade
IBM Power Systems Firmware FW950.H3 (950_230) or newerto a version that resolves this vulnerability.Fixed in FW950.H3(950_230) - Compensating control
Mitigate repeated exploitation impact by restricting access to the ASMI management interface from untrusted networks (allow only trusted management-network sources).
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker who has network access to the management network can exploit the ASMI web interface. Hosted partitions are not affected.
Is authentication or user interaction required?
No. The affected ASMI web interface can be targeted without authentication or user interaction, provided the attacker can reach it on the management network.
What is the operational impact of exploitation?
Exploitation can crash the ASMI web server, potentially cause memory corruption, and generate an error log. Although ASMI restarts automatically, repeated attacks can sustain loss of access to the ASMI management interface.
Which firmware levels are affected?
Affected levels are FW1120.00; FW1110.00 through FW1110.30; FW1060.00 through FW1060.80; and FW950.00 through FW950.H2.