CyberRota Analysis
AI-GeneratedIBM Power Systems Firmware versions FW950.00 through FW950.H2 and OP940.00 through OP940.a1 are vulnerable to a memory corruption issue due to improper NVRAM parsing, which can be exploited by an attacker with root access to a guest partition on OpenPOWER systems. The exploitation can lead to a crash of the host firmware boot stage, impacting system integrity and availability until manual intervention is performed to clear the NVRAM. Organizations using OpenPOWER systems should prioritize this vulnerability to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention — clearing NVRAM via the service processor — to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)