CVE-2024-45656

CRITICAL

9.8

Description

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/29/2024

Last Modified12/3/2025

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:ess_5000_\(5105-22e\)ibm:ess_5000_\(5105-22e\)_firmwareibm:power_system_e1080_\(9080-hex\)ibm:power_system_e1080_\(9080-hex\)_firmwareibm:power_system_e850_\(8408-e8e\)ibm:power_system_e850_\(8408-e8e\)_firmwareibm:power_system_e850c_\(8408-44e\)ibm:power_system_e850c_\(8408-44e\)_firmwareibm:power_system_e870_\(9119-mme\)ibm:power_system_e870_\(9119-mme\)_firmwareibm:power_system_e870c_\(9080-mme\)ibm:power_system_e870c_\(9080-mme\)_firmwareibm:power_system_e880_\(9119-mhe\)ibm:power_system_e880_\(9119-mhe\)_firmwareibm:power_system_e880c_\(9080-mhe\)ibm:power_system_e880c_\(9080-mhe\)_firmwareibm:power_system_e950_\(9040-mr9\)ibm:power_system_e950_\(9040-mr9\)_firmwareibm:power_system_e980_\(9080-m9s\)ibm:power_system_e980_\(9080-m9s\)_firmwareibm:power_system_h922_\(9223-22h\)ibm:power_system_h922_\(9223-22h\)_firmwareibm:power_system_h922_\(9223-22s\)ibm:power_system_h922_\(9223-22s\)_firmwareibm:power_system_h924_\(9223-42h\)ibm:power_system_h924_\(9223-42h\)_firmwareibm:power_system_h924_\(9223-42s\)ibm:power_system_h924_\(9223-42s\)_firmwareibm:power_system_l922_\(9008-22l\)ibm:power_system_l922_\(9008-22l\)_firmwareibm:power_system_s812_\(8284-21a\)ibm:power_system_s812_\(8284-21a\)_firmwareibm:power_system_s812l_\(8247-21l\)ibm:power_system_s812l_\(8247-21l\)_firmwareibm:power_system_s814_\(8286-41a\)ibm:power_system_s814_\(8286-41a\)_firmwareibm:power_system_s822_\(8284-22a\)ibm:power_system_s822_\(8284-22a\)_firmwareibm:power_system_s822l_\(8247-22l\)ibm:power_system_s822l_\(8247-22l\)_firmwareibm:power_system_s824_\(8286-42a\)ibm:power_system_s824_\(8286-42a\)_firmwareibm:power_system_s824l_\(8247-42l\)ibm:power_system_s824l_\(8247-42l\)_firmwareibm:power_system_s914_\(9009-41a\)ibm:power_system_s914_\(9009-41a\)_firmwareibm:power_system_s914_\(9009-41g\)ibm:power_system_s914_\(9009-41g\)_firmwareibm:power_system_s922_\(9009-22a\)ibm:power_system_s922_\(9009-22a\)_firmwareibm:power_system_s922_\(9009-22g\)ibm:power_system_s922_\(9009-22g\)_firmwareibm:power_system_s924_\(9009-42a\)ibm:power_system_s924_\(9009-42a\)_firmwareibm:power_system_s924_\(9009-42g\)ibm:power_system_s924_\(9009-42g\)_firmware

Weaknesses (CWE)

CWE-798

References

https://www.ibm.com/support/pages/node/7174183(psirt@us.ibm.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.