Vulnerability in Ibm Ess_5000_\(5105-22e\)
CVE-2024-45656
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to ga…
EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ibm Ess_5000_\(5105-22e\)
- Ibm Ess_5000_\(5105-22e\)_firmware
- Ibm Flexible Service Processor — versions FW860.00, FW950.00, FW1030.00
- Ibm Power_system_e1080_\(9080-hex\)
- Ibm Power_system_e1080_\(9080-hex\)_firmware
- Ibm Power_system_e850_\(8408-e8e\)
- Ibm Power_system_e850_\(8408-e8e\)_firmware
- Ibm Power_system_e850c_\(8408-44e\)
- Ibm Power_system_e850c_\(8408-44e\)_firmware
- Ibm Power_system_e870_\(9119-mme\)
Weakness classification (CWE)
References
- psirt@us.ibm.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-45656?
- CVE-2024-45656 is a critical-severity vulnerability in Ibm Ess_5000_\(5105-22e\), classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2024-10-29.
- How severe is CVE-2024-45656?
- Critical severity. CVSS v3 base score is 9.8 out of 10.