CVE-2024-45656

high-risk

Published 2024-10-29

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Do I need to act?

0.15% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Power System E1080 \(9080-Hex\) Firmware

Power System L922 \(9008-22L\) Firmware

Power System S922 \(9009-22A\) Firmware

Power System S922 \(9009-22G\) Firmware

Power System H922 \(9223-22H\) Firmware

Power System H922 \(9223-22S\) Firmware

Power System S914 \(9009-41A\) Firmware

Power System S914 \(9009-41G\) Firmware

Power System S924 \(9009-42A\) Firmware

Power System S924 \(9009-42G\) Firmware

Power System H924 \(9223-42H\) Firmware

Power System H924 \(9223-42S\) Firmware

Power System E950 \(9040-Mr9\) Firmware

Power System E980 \(9080-M9S\) Firmware

Ess 5000 \(5105-22E\) Firmware

Power System S812 \(8284-21A\) Firmware

Power System S822 \(8284-22A\) Firmware

Power System S814 \(8286-41A\) Firmware

Power System S824 \(8286-42A\) Firmware

Power System S812L \(8247-21L\) Firmware

Affected Vendors

Ibm

References (1)

Vendor Advisory https://www.ibm.com/support/pages/node/7174183

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 1/34 · Minimal

Exposure 22/34 · High