Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:power_9_systems:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductPower 9 Systems (5a202092-3733-589d-bc3a-cc09608edc2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20487 vulnerable 2026-06-08 05:29:09.311470 Details available
HIGH (8)
IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware bypassing the host firmware signature verification process.
Published: 2021-05-26T16:20:17.769Z
Updated: 2024-09-16T18:33:23.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1992 vulnerable 2026-06-08 05:11:26.476095 Details available
MEDIUM (6.4)
The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.
Published: 2019-03-21T14:35:28.145Z
Updated: 2024-09-16T17:18:29.221Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.