CyberRota Analysis
AI-GeneratedThe vulnerability in IBM Power Systems Firmware allows unauthenticated attackers with network access to exploit the ASMI web interface by sending malformed requests, leading to arbitrary code execution. This critical flaw can grant attackers complete control over the affected systems, compromising confidentiality, integrity, and availability. Organizations using the specified firmware versions should prioritize immediate remediation to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in a confidentiality, integrity, and availability impact.
Related CVEs
Other vulnerabilities affecting the same vendor(s)