CVE-2026-19321
MediumCVSS 6.7Summary
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.
Risk Assessment
The risk includes potential leakage of sensitive hardware data and limited disruption to system operations, potentially affecting confidentiality and availability.
Recommendation
It is recommended to update the firmware to the latest available version that includes fixes for this vulnerability. Also, restrict service access to the service processor to trusted personnel only.
Original NVD description (English source)
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.