Vulnerability in IBM Ess 5000 \(5105-22e\)
CVE-2024-45656
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.004 (37.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 37.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- IBM Ess 5000 \(5105-22e\)
- IBM Ess 5000 \(5105-22e\) Firmware
- IBM Flexible Service Processor — versions FW860.00, FW950.00, FW1030.00
- IBM Power System E1080 \(9080-Hex\)
- IBM Power System E1080 \(9080-Hex\) Firmware
- IBM Power System E850 \(8408-E8e\)
- IBM Power System E850 \(8408-E8e\) Firmware
- IBM Power System E850c \(8408-44e\)
- IBM Power System E850c \(8408-44e\) Firmware
- IBM Power System E870 \(9119-Mme\)
Weakness classification (CWE)
References
- www.ibm.com/support/pages/node/7174183 (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-45656?
- CVE-2024-45656 is a critical-severity vulnerability in IBM Ess 5000 \(5105-22e\), classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2024-10-29.
- How severe is CVE-2024-45656?
- Critical severity. CVSS v3 base score is 9.8 out of 10.