CVE-2022-22309

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-05-24

Last modified

2024-09-16

Weaknesses

CWE-306

Affected products

• Power System S922 Firmware (Ibm)
• Power System S922 Server (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/217095
• https://www.ibm.com/support/pages/node/6589099