CVE-2026-17100: Power System Out-of-bounds Write
IBM Power Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.
Other sources
Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Systems firmware (service processor mailbox interface)to a version that resolves this vulnerability.Patch OP940.82 or newer - Upgrade
Upgrade
IBM Power Systems firmware (service processor mailbox interface)to a version that resolves this vulnerability.Patch OP940.a2 or newer
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Systems running the listed IBM Power Firmware levels are exposed if an attacker can obtain authenticated service-level access to the BMC/FSP. The issue affects the service processor mailbox interface and can compromise the managed system.
What level of access does an attacker need to exploit it?
The attacker needs authenticated service-level access to the BMC/FSP. The provided information does not indicate that unauthenticated or remote access alone is sufficient.
What is the impact of successful exploitation?
An attacker can execute arbitrary code in the host firmware runtime and gain full control over the managed system. This can affect confidentiality, integrity, and availability.
Which firmware versions are identified as affected?
Affected versions include FW1120.00; FW1110.00 through FW1110.30; FW1060.00 through FW1060.80; FW950.00 through FW950.H2; and OP940.00 through OP940.a1 and OP940.81.