IBM OpenBMC firmware versions FW1120.00–FW1120.01, FW1110.00–FW1110.31, and FW1060.00–FW1060.81 expose a vulnerability in the BMC firmware management interface. The flaw allows a limited amount of BMC internal memory to be read and can cause the firmware management service to crash. The result is a confidentiality breach from peeking internal data and an availability impact due to the crash in the embedded management controller that controls the host system.

The vulnerability affects IBM Power Systems Power 11 models S1122, S1124, S1122s, S1114, L1122, L1124, E1150, and S1112, as well as Power 10 models S1022, S1024, S1022s, S1014, L1022, L1024, E1050, and S1012. Firmware versions FW1120.00–FW1120.01, FW1110.00–FW1110.31, and FW1060.00–FW1060.81 are impacted. Users should update to FW1120.02 or newer, FW1110.32 or newer, or FW1060.82 or newer, available from IBM Fix Central.

With a CVSS score of 3.4, the vulnerability is classified as low severity. The EPSS score is below 1%, indicating a very low probability of exploitation, and the issue is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is through the BMC firmware management interface, accessed via the host's out-of-band network. Attackers would need remote access to that interface, which may be exposed to untrusted networks. The CWE‑125 classification indicates a buffer-read or out-of-bounds read, which could expose limited internal memory contents or cause a service crash. Because the BMC controls host operations, an availability impact could affect the managed system as a whole. In environments where the BMC is exposed to untrusted networks, this risk warrants firmware updates and network hardening.