CVE-2026-16682

Full vulnerability record from the local CVENow database.

Description

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources.

Severity

MEDIUM

CVSS score

6.5 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-11-08 20:17:24.137000

Last modified

2026-11-08 20:17:24.257000

View original CVE JSON

{
  "id": "CVE-2026-16682",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-08T20:17:24.137",
  "lastModified": "2026-11-08T20:17:24.257",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper handling of uninitialized resources."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "OPENBMC",
          "cpes": [
            "cpe:2.3:a:ibm:openbmc:fw1120.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1120.01.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1110.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op940.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op940.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op940.a2:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op940.a2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op910.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op910.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op910.95:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:openbmc:op910.95.0:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "FW1120.00",
              "lessThanOrEqual": "FW1120.01",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "FW1110.00",
              "lessThanOrEqual": "FW1110.31",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "FW1060.00",
              "lessThanOrEqual": "FW1060.81",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "OP940.00",
              "lessThanOrEqual": "OP940.A2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "OP910.00",
              "lessThanOrEqual": "OP910.95",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "IBM",
          "product": "Hardware Management Console",
          "cpes": [
            "cpe:2.3:a:ibm:hardware_management_console:op940.00:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:hardware_management_console:op940.00.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:hardware_management_console:op940.82:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:hardware_management_console:op940.82.0:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "OP940.00",
              "lessThanOrEqual": "OP940.82",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7294279",
      "source": "[email protected]"
    }
  ]
}