344720 matches found
MINI-9VG4-526F-GRQ8
Bulletin has no description...
MINI-XPMC-3HPF-VG8Q
Bulletin has no description...
MINI-37C3-5X2W-3588
Bulletin has no description...
Security Bulletin: This Power System update is being released to address CVE-2026-4937
Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...
Security Bulletin: This Power System update is being released to address CVE-2026-17042
Summary Power Systems Firmware is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This...
Security Bulletin: This Power System update is being released to address CVE-2026-17093
Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting...
Security Bulletin: This Power System update is being released to address CVE-2026-18871
Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...
Security Bulletin: This Power System update is being released to address CVE-2026-17100
Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control ove...
Security Bulletin: This Power System update is being released to address CVE-2026-16707
Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host...
Security Bulletin: This Power System update is being released to address CVE-2026-18681
Summary Power Systems Firmware is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact...
Security Bulletin: This Power System update is being released to address CVE-2026-16828
Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interfa...
Security Bulletin: This Power System update is being released to address CVE-2026-18848
Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visit a crafted web page can, under specific conditions, silently perform administrative actions on the FSP on behalf of that administrator, resultin...
Security Bulletin: This Power System update is being released to address CVE-2026-16938
Summary Power Systems Firmware is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to the FSP can place the managed system into a non-production operational mode, allowing certain...
Security Bulletin: This Power System update is being released to address CVE-2026-16687
Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in a confidentialit...
Security Bulletin: This Power System update is being released to address CVE-2026-18849
Summary Power Systems Firmware is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact...
Security Bulletin: This Power System update is being released to address CVE-2026-17414
Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition performing a network boot can prevent that partition from completing its boot sequence. On partitions where OS secure...
Security Bulletin: This Power System update is being released to address CVE-2026-17028
Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN network boot can prevent that partition from completing its boot sequence. Other partitions and...
Security Bulletin: This Power System update is being released to address CVE-2026-18821
Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code to be executed in the partition firmware and...
Security Bulletin: This Power System update is being released to address CVE-2026-17097
Summary Power Systems Firmware is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causing a virtual processor to become permanently unresponsive, requiring a full platform re-IPL ...
Security Bulletin: This Power System update is being released to address CVE-2026-17091
Summary Power Systems Firmware is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to inject an arbitrary amount of data into hypervisor or partition memory, resulting in either a...