Code injection

2021-05-2617:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature verification process.

CPENameOperatorVersion
power9_system_firmwareeq>= fw930.0 AND < fw930.30
power9_system_firmwareeq>= fw940.0 AND < fw940.20
power9_system_firmwareeq< fw950.0
scale-out_lc_system_firmwareeq< op940.20

Name	Operator	Version
power9_system_firmware	eq	>= fw930.0 AND < fw930.30
power9_system_firmware	eq	>= fw940.0 AND < fw940.20
power9_system_firmware	eq	< fw950.0
scale-out_lc_system_firmware	eq	< op940.20