Description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.6",
  "pubDate": "2026-08-19T19:17:10.420Z",
  "pubdate": "2026-08-19T19:17:10.420Z",
  "executiveSummary": "A denial of service vulnerability exists within the ASMI web interface of IBM Power Systems Firmware, specifically affecting versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2.\nThe vulnerability allows an unauthenticated attacker located on the management network to cause the ASMI web server to crash, potentially inducing memory corruption and generating error logs.\nAlthough the ASMI web interface features an automatic restart mechanism, repeated and continuous exploitation by an adversary can lead to a sustained loss of administrative access to the ASMI management interface, thereby impacting system availability and management integrity.\nHosted partitions on the target systems remain unaffected by this specific management plane flaw.\nSuccessful exploitation requires network adjacency or accessibility to the restricted management network hosting the ASMI interface, bypassing the need for prior authentication credentials.\nThe primary risk implication is the disruption of out-of-band management capabilities, hindering administrative oversight and incident response actions on vulnerable hardware.",
  "technicalDetails": "The vulnerability resides in the Advanced System Management Interface (ASMI) web server component of IBM Power Systems Firmware.\nThe affected product versions include FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2.\nThe attack vector is network-based, specifically requiring the adversary to have direct connectivity to the management network where the ASMI web interface is exposed.\nThe vulnerability requires zero authentication privileges, meaning an unauthenticated remote entity can interact directly with the vulnerable ASMI web server endpoints.\nThe root cause involves improper handling of incoming web requests by the ASMI web server, which upon processing malformed or malicious inputs, triggers a fatal application fault leading to a server crash and potential memory corruption.\nThe step-by-step attack flow begins with the unauthenticated attacker establishing network connectivity to the ASMI web interface over the management network.\nThe attacker transmits a specifically crafted HTTP request designed to trigger the underlying flaw within the ASMI web server parsing or handling logic.\nUpon receiving the payload, the vulnerable component encounters an unhandled exception or memory corruption condition, causing the ASMI web service to terminate abruptly.\nThe crash generates an internal error log within the system firmware and temporarily severs management access.\nWhile the ASMI web interface is designed to restart automatically following a crash, an attacker can script repeated exploitation requests to perpetually disrupt the service.\nThis cyclical crashing results in a sustained loss of access to the ASMI management interface, denying administrators the ability to perform vital hardware-level management functions, power operations, and system diagnostics.\nPost-exploitation impact is strictly contained to the availability and integrity of the ASMI management plane, with hosted logical partitions remaining unaffected and isolated from the crash."
}