Power System S924 (9009-42a) Firmware vulnerabilities

2 known vulnerabilities in Power System S924 (9009-42a) Firmware from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  PowerVM Hypervisor: Buffer Copy without Checking Size of Input

  CVE-2026-11885Jul 30, 2026IBM

  IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.

• 9.8 Critical severity

  Flexible Service Processor: Use of Hard-coded Credentials

  CVE-2024-45656Oct 29, 2024IBM

  IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges