ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-45656

—
CVSS 3.1
9.8 critical
EPSS
<1%p38
Published
()
Modified
Description

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Vendors
ibm
Products
power system e1080 \(9080-hex\) firmware, power system l922 \(9008-22l\) firmware, power system s922 \(9009-22a\) firmware, power system s922 \(9009-22g\) firmware, power system h922 \(9223-22h\) firmware, power system h922 \(9223-22s\) firmware, power system s914 \(9009-41a\) firmware, power system s914 \(9009-41g\) firmware, power system s924 \(9009-42a\) firmware, power system s924 \(9009-42g\) firmware, power system h924 \(9223-42h\) firmware, power system h924 \(9223-42s\) firmware
Weakness
CWE-798
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.