| ID |
CVE-2026-16938
|
| Sažetak |
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to the FSP can place the managed system into a non-production operational mode, allowing certain system components to be disabled. This condition persists across FSP resets and requires explicit operator intervention — clearing the affected configuration — to restore normal operation. Successful exploitation results in an availability impact to the managed system. |
| Reference |
|
| CVSS |
| Base: | 6.9 |
| Impact: | 4.7 |
| Exploitability: | 1.7 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| ADJACENT_NETWORK |
LOW |
HIGH |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
LOW |
HIGH |
|
| CVSS vektor |
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H |
| Zadnje važnije ažuriranje |
25-08-2026 - 15:56 |
| Objavljeno |
19-08-2026 - 19:17 |
