CVE-2024-45656
Critical
Description
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Ibm Power System E1080 \(9080-hex\) Firmware
PublishedOct 29, 2024
First seenOct 29, 2024
Weakness typeCWE-798Hard-coded credentials
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm power_system_e1080_\(9080-hex\)_firmware | FW1030.00 ≤ v ≤ FW1030.61, FW1050.00 ≤ v ≤ FW1050.21, FW1060.00 ≤ v ≤ FW1060.10 | — |
| ibm power_system_l922_\(9008-22l\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s922_\(9009-22a\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s922_\(9009-22g\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_h922_\(9223-22h\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_h922_\(9223-22s\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s914_\(9009-41a\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s914_\(9009-41g\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s924_\(9009-42a\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s924_\(9009-42g\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_h924_\(9223-42h\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_h924_\(9223-42s\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_e950_\(9040-mr9\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_e980_\(9080-m9s\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm ess_5000_\(5105-22e\)_firmware | FW950.00 ≤ v ≤ FW950.C0 | — |
| ibm power_system_s812_\(8284-21a\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s822_\(8284-22a\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s814_\(8286-41a\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s824_\(8286-42a\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s812l_\(8247-21l\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s822l_\(8247-22l\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_s824l_\(8247-42l\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e850_\(8408-e8e\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e850c_\(8408-44e\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e870_\(9119-mme\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e880_\(9119-mhe\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e870c_\(9080-mme\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
| ibm power_system_e880c_\(9080-mhe\)_firmware | FW860.00 ≤ v ≤ FW860.B3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.