Skip to content
Sign in
6.5 Medium

CVE-2026-17427 This Power System update is being released to address

Description

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.

CVSS 3.1 detail

Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitable from the adjacent network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Adjacent network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products and versions

Product Affected versions Fixed in
OPENBMC Versions not published
Power Hardware Management Console Versions not published

Other CVEs of OPENBMC

The 14 CVEs of OPENBMC →
CVE-2026-17426 This Power System update is being released to address 6.5 Medium CVE-2026-16697 This Power System update is being released to address 6.5 Medium CVE-2026-16682 This Power System update is being released to address 6.5 Medium CVE-2026-18857 IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a… 3.4 Low
Track this CVE