Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-7254
PUBLISHED
More InfoOfficial Page
Assigner-ibm
Assigner Org ID-9a959283-ebb5-44b6-b705-dcc2bbced522
View Known Exploited Vulnerability (KEV) details
Published At-27 May, 2026 | 13:12
Updated At-27 May, 2026 | 14:48
Rejected At-
▼CVE Numbering Authority (CNA)
Open BMC Denial of Service

IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.

Affected Products
Vendor
IBM CorporationIBM
Product
OPENBMC
CPEs
  • cpe:2.3:a:ibm:openbmc:fw1110.00:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:openbmc:fw1110.00.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:openbmc:fw1110.11:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:openbmc:fw1110.11.0:*:*:*:*:*:*:*
Versions
Affected
  • From FW1110.00 through FW1110.11 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-1284CWE-1284 Improper Validation of Specified Quantity in Input
Type: CWE
CWE ID: CWE-1284
Description: CWE-1284 Improper Validation of Specified Quantity in Input
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Customers with the products below should install FW1110.20(1110_130) or newer to remediate this vulnerability. Power 11 1) IBM Power System S1122 (9824-22A) 2) IBM Power System S1124 (9824-42A) 3) IBM Power System S1122s (9824-22B) 4) IBM Power System S1114 (9824-41B) 5) IBM Power System L1122 (9856-22H) 6) IBM Power System L1124 (9856-42H) 7) IBM Power System E1150 (9043-MRU) The images mentioned above can be located at IBM Fix Central : https://www.ibm.com/support/fixcentral/

Configurations
Workarounds

Protect access to the BMC's network interface.

Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.ibm.com/support/pages/node/7272993
vendor-advisory
patch
Hyperlink: https://www.ibm.com/support/pages/node/7272993
Resource:
vendor-advisory
patch
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found