Vulnerability Description
IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI, causing the web server to crash with possible memory corruption and generate an error log. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Power System E1080 \(9080-Hex\) Firmware | >= fw1060.00, < fw1060.82 |
| Ibm | Power System E1080 \(9080-Hex\) | - |
| Ibm | Power System E1180 \(9080-Heu\) Firmware | >= fw1110.00, < fw1110.32 |
| Ibm | Power System E1180 \(9080-Heu\) | - |
| Ibm | Power System S922 \(9009-22G\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System S922 \(9009-22G\) | - |
| Ibm | Power System H922 \(9223-22S\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System H922 \(9223-22S\) | - |
| Ibm | Power System S914 \(9009-41G\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System S914 \(9009-41G\) | - |
| Ibm | Power System S924 \(9009-42G\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System S924 \(9009-42G\) | - |
| Ibm | Power System H924 \(9223-42S\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System H924 \(9223-42S\) | - |
| Ibm | Power System E950 \(9040-Mr9\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System E950 \(9040-Mr9\) | - |
| Ibm | Power System E980 \(9080-M9S\) Firmware | >= fw950.00, < fw950.h4 |
| Ibm | Power System E980 \(9080-M9S\) | - |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7289331PatchVendor Advisory
FAQ
What is CVE-2026-93306?
CVE-2026-93306 is a vulnerability with a CVSS score of 7.1 (HIGH). IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An un...
How severe is CVE-2026-93306?
CVE-2026-93306 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-93306?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Power System E1080 \(9080-Hex\) Firmware, Ibm Power System E1080 \(9080-Hex\), Ibm Power System E1180 \(9080-Heu\) Firmware, Ibm Power System E1180 \(9080-Heu\), Ibm Power System S922 \(9009-22G\) Firmware.