Yüksek CVSS 8.2
CVE-2026-96265: CVE-2026-96265: güvenlik açığı
Açıklama (NVD)
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.
Özet bilgiler
- CVSS v3.1
- 8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,12 (yüzdelik 2)
- CWE
- CWE-119
- Yama
- Yok / bilinmiyor