CyberRota Analysis
AI-GeneratedThe vulnerability affects multiple versions of Power Systems Firmware, specifically in the service processor mailbox interface, allowing authenticated attackers with service-level access to execute arbitrary code within the host firmware. This exploitation can lead to complete control over the managed system, compromising its confidentiality, integrity, and availability. Organizations utilizing the affected firmware should prioritize remediation to safeguard their systems against potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)