CVE-2022-22488
Medium
Description
IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337.
SeverityMedium
CVSS4.9
Exploit probability—
Product
Ibm Power System Ac922 \(8335-gtg\) Firmware
PublishedDec 12, 2022
First seenDec 12, 2022
Weakness typeCWE-770Allocation of resources without limits
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm power_system_ac922_\(8335-gtg\)_firmware | op910 ≤ v ≤ op910.70 | — |
| ibm power_system_ac922_\(8335-gth\)_firmware | op940 ≤ v ≤ op940.40 | — |
| ibm power_system_ac922_\(8335-gtx\)_firmware | op940 ≤ v ≤ op940.40 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.