CyberRota Analysis
AI-GeneratedThe vulnerability affects specific versions of Power Systems Firmware, allowing an attacker with service access to the service processor to inject a malicious code update image. This could lead to arbitrary code execution on the host system, compromising its confidentiality, integrity, and availability. Organizations using the affected firmware should prioritize remediation to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)