Critical severity · published Oct 29, 2024
CVE-2024-45656
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through…
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E5
Ess 5000 (5105-22e) Firmware · Ibm
FW950.00 through FW950.C0 · source: NVD
PS
Power System E1080 (9080-hex) Firmware · Ibm
FW1030.00 through FW1030.61; FW1050.00 through FW1050.21; FW1060.00 through FW1060.10 · source: NVD
PS
Power System E850 (8408-e8e) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E850c (8408-44e) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E870 (9119-mme) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E870c (9080-mme) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E880 (9119-mhe) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E880c (9080-mhe) Firmware · Ibm
FW860.00 through FW860.B3 · source: NVD
PS
Power System E950 (9040-mr9) Firmware · Ibm
FW950.00 through FW950.C0 · source: NVD
PS
Power System E980 (9080-m9s) Firmware · Ibm
FW950.00 through FW950.C0 · source: NVD
PS
Power System H922 (9223-22h) Firmware · Ibm
FW950.00 through FW950.C0 · source: NVD
PS
Power System H922 (9223-22s) Firmware · Ibm
FW950.00 through FW950.C0 · source: NVD