CVE-2024-45656

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2024-10-29

Last modified

2024-11-02

Weaknesses

CWE-798

Affected products

• Ess 5000 (5105-22e) Firmware (Ibm)
• Power9 System Firmware (Ibm)
• Power System E1080 (9080-hex) Firmware (Ibm)
• Power System E850 (8408-e8e) Firmware (Ibm)
• Power System E850c (8408-44e) Firmware (Ibm)
• Power System E870 (9119-mme) Firmware (Ibm)
• Power System E870c (9080-mme) Firmware (Ibm)
• Power System E880 (9119-mhe) Firmware (Ibm)
• Power System E880c (9080-mhe) Firmware (Ibm)
• Power System E950 (9040-mr9) Firmware (Ibm)
• Power System E980 (9080-m9s) Firmware (Ibm)
• Power System H922 (9223-22h) Firmware (Ibm)
• Power System H922 (9223-22s) Firmware (Ibm)
• Power System H924 (9223-42h) Firmware (Ibm)
• Power System H924 (9223-42s) Firmware (Ibm)
• Power System L922 (9008-22l) Firmware (Ibm)
• Power System S812 (8284-21a) Firmware (Ibm)
• Power System S812l (8247-21l) Firmware (Ibm)
• Power System S814 (8286-41a) Firmware (Ibm)
• Power System S822 (8284-22a) Firmware (Ibm)
• Power System S822l (8247-22l) Firmware (Ibm)
• Power System S824 (8286-42a) Firmware (Ibm)
• Power System S824l (8247-42l) Firmware (Ibm)
• Power System S914 (9009-41a) Firmware (Ibm)
• Power System S914 (9009-41g) Firmware (Ibm)
• Power System S922 (9009-22a) Firmware (Ibm)
• Power System S922 (9009-22g) Firmware (Ibm)
• Power System S924 (9009-42a) Firmware (Ibm)
• Power System S924 (9009-42g) Firmware (Ibm)

References

• https://www.ibm.com/support/pages/node/7174183