CVE-2026-17063
HighCVSS 7.9Summary
IBM Power Systems Firmware in specific versions has a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions.
Risk Assessment
The risk includes confidentiality and availability impact to the managed system and all partitions, potentially leading to data exposure and downtime.
Recommendation
Apply available firmware updates from IBM for affected versions.
Original NVD description (English source)
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions, resulting in an confidentiality, and availability impact.