3.4

CVE-2026-18857

EPSS 0.11%
Veröffentlicht 24.09.2026 14:17:12
Zuletzt bearbeitet 30.09.2026 16:48:23
Erkennungen
Login

This Power System update is being released to address

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to be read, resulting in a confidentiality and availability impact to the managed system.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 0 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.01

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	3.4	0.8	2.5	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.ibm.com/support/pages/node/7289253

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-18857

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-18857

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-18857

EUVD