CVE-2026-16828: Power System Out-of-bounds Read
IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Server Firmware ASMI web interface (Power Systems)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_184) - Upgrade
Upgrade
IBM Server Firmware ASMI web interface (Power Systems)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_167) - Upgrade
Upgrade
IBM Server Firmware ASMI web interface (Power Systems)to a version that resolves this vulnerability.Fixed in FW950.H3(950_230) - Compensating control
Ensure the management network is protected so that unauthenticated attackers cannot reach the ASMI web interface (the vulnerability is exploitable from the management network), e.g., restrict management network access to trusted hosts/users.
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker who has network access to the management network can exploit the ASMI web interface. Hosted partitions are not affected.
Is authentication or user interaction required?
No. The affected ASMI web interface can be targeted without authentication or user interaction, provided the attacker can reach it on the management network.
What is the operational impact of exploitation?
Exploitation can crash the ASMI web server, potentially cause memory corruption, and generate an error log. Although ASMI restarts automatically, repeated attacks can sustain loss of access to the ASMI management interface.
Which firmware levels are affected?
Affected levels are FW1120.00; FW1110.00 through FW1110.30; FW1060.00 through FW1060.80; and FW950.00 through FW950.H2.