Search
Find a vulnerability
Search criteria
3 vulnerabilities found for Power Hardware Management Console by IBM
CVE-2026-17427 (GCVE-0-2026-17427)
Vulnerability from cvelistv5 – Published: 2026-11-08 19:15 – Updated: 2026-11-09 20:06
VLAI
EPSS
VEX
Title
This Power System update is being released to address
Summary
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-09 20:06 UTC
CWE
- CWE-617 - Reachable Assertion
Assigner
ibm
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7294278 | vendor-advisorypatch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | OPENBMC |
Affected:
FW1060.00 , ≤ FW1060.81
(semver)
Affected: OP940.00 , ≤ OP940.A2 (semver) Affected: OP910.00 , ≤ OP910.95 (semver) cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.a2:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.a2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.95:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.95.0:*:*:*:*:*:*:* |
|
| IBM | Power Hardware Management Console |
Affected:
OP940.00 , ≤ OP940.82
(semver)
cpe:2.3:a:ibm:power_hardware_management_console:op940.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.82:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.82.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-17427",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T20:06:17.450788Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T20:06:28.219Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.a2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.a2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.95:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.95.0:*:*:*:*:*:*:*"
],
"product": "OPENBMC",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "FW1060.81",
"status": "affected",
"version": "FW1060.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "OP940.A2",
"status": "affected",
"version": "OP940.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "OP910.95",
"status": "affected",
"version": "OP910.00",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:power_hardware_management_console:op940.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.82:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.82.0:*:*:*:*:*:*:*"
],
"product": "Power Hardware Management Console",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "OP940.82",
"status": "affected",
"version": "OP940.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.\u003c/p\u003e"
}
],
"value": "IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617 Reachable Assertion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-08T19:15:50.339Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7294278"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System S1022 (9105-22A)\u003cbr/\u003e2) IBM Power System S1024 (9105-42A)\u003cbr/\u003e3) IBM Power System S1022s (9105-22B)\u003cbr/\u003e4) IBM Power System S1014 (9105-41B)\u003cbr/\u003e5) IBM Power System L1022 (9786-22H)\u003cbr/\u003e6) IBM Power System L1024 (9786-42H)\u003cbr/\u003e7) IBM Power System E1050 (9043-MRX)\u003cbr/\u003e8) IBM Power System S1012 (9028-21B)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install OP940.A3, OP910.96 or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003eOpenPower 9\u003cbr/\u003e1) IBM Power System AC922 (8335-GTG)\u003cbr/\u003e2) IBM Power System AC922 (8335-GTC, 8335-GTW)\u003cbr/\u003e3) IBM Power System AC922 (8335-GTH, 8335-GTX)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install OP940.83 or newer to remediate this vulnerability.\u003cbr/\u003e1) IBM Power Hardware Management Console (7063-CR2)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central :\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Customers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\n\n\n\nPower 10\n1) IBM Power System S1022 (9105-22A)\n2) IBM Power System S1024 (9105-42A)\n3) IBM Power System S1022s (9105-22B)\n4) IBM Power System S1014 (9105-41B)\n5) IBM Power System L1022 (9786-22H)\n6) IBM Power System L1024 (9786-42H)\n7) IBM Power System E1050 (9043-MRX)\n8) IBM Power System S1012 (9028-21B)\n\n\n\nCustomers with the products below should install OP940.A3, OP910.96 or newer to remediate this vulnerability.\n\n\n\nOpenPower 9\n1) IBM Power System AC922 (8335-GTG)\n2) IBM Power System AC922 (8335-GTC, 8335-GTW)\n3) IBM Power System AC922 (8335-GTH, 8335-GTX)\n\n\n\nCustomers with the products below should install OP940.83 or newer to remediate this vulnerability.\n1) IBM Power Hardware Management Console (7063-CR2)\n\n\n\nThe images mentioned above can be located at IBM Fix Central :\u00a0 https://www.ibm.com/support/fixcentral/"
}
],
"title": "This Power System update is being released to address",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eProtect access to the BMC\u0027s network interface by operating it on a private network or behind a firewall.\u003c/p\u003e"
}
],
"value": "Protect access to the BMC\u0027s network interface by operating it on a private network or behind a firewall."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-17427",
"datePublished": "2026-11-08T19:15:50.339Z",
"dateReserved": "2026-07-25T06:12:30.417Z",
"dateUpdated": "2026-11-09T20:06:28.219Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16697 (GCVE-0-2026-16697)
Vulnerability from cvelistv5 – Published: 2026-11-08 19:15 – Updated: 2026-11-08 19:15
VLAI
EPSS
VEX
Title
This Power System update is being released to address
Summary
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.
Severity
6.5 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
ibm
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7294277 | vendor-advisorypatch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | OPENBMC |
Affected:
FW1060.00 , ≤ FW1060.81
(semver)
Affected: OP940.00 , ≤ OP940.A2 (semver) Affected: OP910.00 , ≤ OP910.95 (semver) cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.a2:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op940.a2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.95:*:*:*:*:*:*:* cpe:2.3:a:ibm:openbmc:op910.95.0:*:*:*:*:*:*:* |
|
| IBM | Power Hardware Management Console |
Affected:
OP940.00 , ≤ OP940.82
(semver)
cpe:2.3:a:ibm:power_hardware_management_console:op940.00:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.00.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.82:*:*:*:*:*:*:* cpe:2.3:a:ibm:power_hardware_management_console:op940.82.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:openbmc:fw1060.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.81:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:fw1060.81.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.a2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op940.a2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.95:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:openbmc:op910.95.0:*:*:*:*:*:*:*"
],
"product": "OPENBMC",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "FW1060.81",
"status": "affected",
"version": "FW1060.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "OP940.A2",
"status": "affected",
"version": "OP940.00",
"versionType": "semver"
},
{
"lessThanOrEqual": "OP910.95",
"status": "affected",
"version": "OP910.00",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:a:ibm:power_hardware_management_console:op940.00:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.00.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.82:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:power_hardware_management_console:op940.82.0:*:*:*:*:*:*:*"
],
"product": "Power Hardware Management Console",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "OP940.82",
"status": "affected",
"version": "OP940.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and\u0026nbsp; OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.\u003c/p\u003e"
}
],
"value": "IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and\u00a0 OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-08T19:15:04.520Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7294277"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCustomers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003ePower 10\u003cbr/\u003e1) IBM Power System S1022 (9105-22A)\u003cbr/\u003e2) IBM Power System S1024 (9105-42A)\u003cbr/\u003e3) IBM Power System S1022s (9105-22B)\u003cbr/\u003e4) IBM Power System S1014 (9105-41B)\u003cbr/\u003e5) IBM Power System L1022 (9786-22H)\u003cbr/\u003e6) IBM Power System L1024 (9786-42H)\u003cbr/\u003e7) IBM Power System E1050 (9043-MRX)\u003cbr/\u003e8) IBM Power System S1012 (9028-21B)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install OP940.A3, OP910.96 or newer to remediate this vulnerability.\u003c/p\u003e\u003cp\u003eOpenPower 9\u003cbr/\u003e1) IBM Power System AC922 (8335-GTG)\u003cbr/\u003e2) IBM Power System AC922 (8335-GTC, 8335-GTW)\u003cbr/\u003e3) IBM Power System AC922 (8335-GTH, 8335-GTX)\u003c/p\u003e\u003cp\u003eCustomers with the products below should install OP940.83 or newer to remediate this vulnerability.\u003cbr/\u003e1) IBM Power Hardware Management Console (7063-CR2)\u003c/p\u003e\u003cp\u003eThe images mentioned above can be located at IBM Fix Central :\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/\u003c/a\u003e\u003c/p\u003e"
}
],
"value": "Customers with the products below should install FW1060.82(1060_199) or newer to remediate this vulnerability.\n\n\n\nPower 10\n1) IBM Power System S1022 (9105-22A)\n2) IBM Power System S1024 (9105-42A)\n3) IBM Power System S1022s (9105-22B)\n4) IBM Power System S1014 (9105-41B)\n5) IBM Power System L1022 (9786-22H)\n6) IBM Power System L1024 (9786-42H)\n7) IBM Power System E1050 (9043-MRX)\n8) IBM Power System S1012 (9028-21B)\n\n\n\nCustomers with the products below should install OP940.A3, OP910.96 or newer to remediate this vulnerability.\n\n\n\nOpenPower 9\n1) IBM Power System AC922 (8335-GTG)\n2) IBM Power System AC922 (8335-GTC, 8335-GTW)\n3) IBM Power System AC922 (8335-GTH, 8335-GTX)\n\n\n\nCustomers with the products below should install OP940.83 or newer to remediate this vulnerability.\n1) IBM Power Hardware Management Console (7063-CR2)\n\n\n\nThe images mentioned above can be located at IBM Fix Central :\u00a0 https://www.ibm.com/support/fixcentral/"
}
],
"title": "This Power System update is being released to address",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eProtect access to the BMC\u0027s network interface by operating it on a private network or behind a firewall.\u003c/p\u003e"
}
],
"value": "Protect access to the BMC\u0027s network interface by operating it on a private network or behind a firewall."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-16697",
"datePublished": "2026-11-08T19:15:04.520Z",
"dateReserved": "2026-07-23T01:20:20.167Z",
"dateUpdated": "2026-11-08T19:15:04.520Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-56477 (GCVE-0-2024-56477)
Vulnerability from cvelistv5 – Published: 2025-02-14 14:49 – Updated: 2025-02-14 14:56
VLAI
EPSS
VEX
Title
IBM Power Hardware Management Console directory traversal
Summary
IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-14 14:56 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
ibm
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7183224 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Power Hardware Management Console |
Affected:
10.3.1050.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-56477",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-14T14:56:34.649052Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-14T14:56:48.942Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Power Hardware Management Console",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.3.1050.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system."
}
],
"value": "IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-14T14:49:45.839Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7183224"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Power Hardware Management Console directory traversal",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-56477",
"datePublished": "2025-02-14T14:49:45.839Z",
"dateReserved": "2024-12-26T12:51:40.265Z",
"dateUpdated": "2025-02-14T14:56:48.942Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}