IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
Protect access to the FSP's network interface.
Customers with the products below should install FW1120.01(1120_167), FW1110.31(1110_134) or newer to remediate this vulnerability.
Power 11
1) IBM Power System E1180 (9080-HEU)
Customers with the products below should install FW1060.81(1060_184) or newer to remediate this vulnerability.
Power 10
1) IBM Power System E1080 (9080-HEX)
Customers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.
Power 9
1) IBM Power System S922 (9009-22G)
2) IBM Power System H922 (9223-22S)
3) IBM Power System S914 (9009-41G)
4) IBM Power System S924 (9009-42G)
5) IBM Power System H924 (9223-42S)
6) IBM Power System E950 (9040-MR9)
7) IBM Power System E980 (9080-M9S)
The images mentioned above can be located at IBM Fix Central : https://www.ibm.com/support/fixcentral/