Kestrel
대시보드로 돌아가기
CVE-2026-17042HIGH· 7.3MITRENVD대응게시일: 2026. 08. 19.수정일: 2026. 08. 25.CNA: psirt@us.ibm.comAnalyzed

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by

Memory-Corruption

위협 신호 · CVSS · EPSS · KEV

정기 패치· 높은 악용 신호 없음
CVSS
7.3high

이론적 심각도 점수

EPSS
0.1%상위 98.8%

30일 내 악용 확률 예측

KEV
미등재

실측 악용 기록 없음

권장 대응 기한차기 업그레이드 시CISA SSVC 기준

별도 긴급 패치 불필요 — 정기 시스템 업그레이드 주기에 맞춰 조치

· KEV 미등재 · 자동화 어려움 · 부분 영향 · 내부 한정

CVSS 벡터 · 메트릭

악용 경로
공격 벡터로컬
공격 복잡도낮음
필요 권한낮음
사용자 상호작용불필요
범위변경
영향
기밀성 영향없음
무결성 영향낮음
가용성 영향높음
버전별 점수
CVSS 3.17.3HIGH· 악용성 2· 영향도 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

약점 (CWE)

  • CWE-125

    경계 밖 읽기 — 버퍼 범위를 벗어난 메모리를 읽어 민감 정보 유출·충돌 유발.

상세 설명

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention — clearing NVRAM via the service processor — to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.

AI 심층 분석

공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.

영향받는 제품·버전

  • ibm power_system_s922_\(9009-22g\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_s922_\(9009-22g\)
    other
  • ibm power_system_h922_\(9223-22s\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_h922_\(9223-22s\)
    other
  • ibm power_system_s914_\(9009-41g\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_s914_\(9009-41g\)
    other
  • ibm power_system_s924_\(9009-42g\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_s924_\(9009-42g\)
    other
  • ibm power_system_h924_\(9223-42s\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_h924_\(9223-42s\)
    other
  • ibm power_system_e950_\(9040-mr9\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_e950_\(9040-mr9\)
    other
  • ibm power_system_e980_\(9080-m9s\)_firmwarefw950.00 - fw950.h3
    other
  • ibm power_system_e980_\(9080-m9s\)
    other
  • ibm power_system_ac922_\(8335-gth\)_firmwareop940 - op940.a2
    other
  • ibm power_system_ac922_\(8335-gth\)
    other
  • ibm power_system_ac922_\(8335-gtx\)_firmwareop940 - op940.a2
    other
  • ibm power_system_ac922_\(8335-gtx\)
    other
  • ibm power_hardware_management_console_\(7063-cr2\)_firmwareop940 - op940.82
    other
  • ibm power_hardware_management_console_\(7063-cr2\)
    other

영향받는 구성 (CPE) 20

  • ibm power_system_s922_(9009-22g)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_s922_(9009-22g)cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:*:*:*:*:*:*:*
  • ibm power_system_h922_(9223-22s)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_h922_(9223-22s)cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:*:*:*:*:*:*:*
  • ibm power_system_s914_(9009-41g)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_s914_\(9009-41g\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_s914_(9009-41g)cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:*:*:*:*:*:*:*
  • ibm power_system_s924_(9009-42g)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_s924_\(9009-42g\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_s924_(9009-42g)cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:*:*:*:*:*:*:*
  • ibm power_system_h924_(9223-42s)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_h924_(9223-42s)cpe:2.3:h:ibm:power_system_h924_\(9223-42s\):-:*:*:*:*:*:*:*
  • ibm power_system_e950_(9040-mr9)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_e950_(9040-mr9)cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:*:*:*:*:*:*:*
  • ibm power_system_e980_(9080-m9s)_firmware≥ fw950.00 < fw950.h3cpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_e980_(9080-m9s)cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:*:*:*:*:*:*:*
  • ibm power_system_ac922_(8335-gth)_firmware≥ op940 < op940.a2cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_ac922_(8335-gth)cpe:2.3:h:ibm:power_system_ac922_\(8335-gth\):-:*:*:*:*:*:*:*
  • ibm power_system_ac922_(8335-gtx)_firmware≥ op940 < op940.a2cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_system_ac922_(8335-gtx)cpe:2.3:h:ibm:power_system_ac922_\(8335-gtx\):-:*:*:*:*:*:*:*
  • ibm power_hardware_management_console_(7063-cr2)_firmware≥ op940 < op940.82cpe:2.3:o:ibm:power_hardware_management_console_\(7063-cr2\)_firmware:*:*:*:*:*:*:*:*
  • ibm power_hardware_management_console_(7063-cr2)cpe:2.3:h:ibm:power_hardware_management_console_\(7063-cr2\):-:*:*:*:*:*:*:*

참고 자료 1

링크 내용 불러오는 중…