EUVD-2026-62754
GHSA-986g-62f7-8mjc
Severity by source
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Adjacent vector confirmed by management interface exposure; PR:H required because description explicitly states administrator-level authentication; no confidentiality or integrity impact from a crash-only integer overflow.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface (VMI). An attacker with authenticated administrator-level access can cause the VMI to crash. The VMI will restart automatically; however, repeated exploitation could result in a sustained availability impact.
AnalysisAI
Authenticated denial-of-service in IBM Virtualization Management Interface (VMI) allows an administrator-level attacker positioned on an adjacent network to trigger an integer overflow that crashes the VMI process. Affected firmware spans FW1060.00-FW1060.80, FW1110.00-FW1110.30, and FW1120.00. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete prerequisites: (1) authenticated administrator-level access to the IBM Virtualization Management Interface - the CVSS vector confirms PR:H, meaning unauthenticated or low-privilege exploitation is not possible; and (2) adjacent network positioning (AV:A), meaning the attacker must be on the same network segment, VLAN, or broadcast domain as the VMI interface - remote internet-based exploitation is not possible per the vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall real-world risk of this vulnerability is low-to-moderate despite the high availability impact (A:H) in the CVSS vector. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | IBM has released a patch addressing this vulnerability; administrators should consult the IBM support page at https://www.ibm.com/support/pages/node/7283189 for the specific fixed firmware version applicable to their branch (FW1060, FW1110, or FW1120) and apply the update following IBM's firmware update procedures. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today