Paper/Archive/CVE-2022-22374

CVE-2022-22374

IBM Power 9 AC922 — The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to…

EPSS 1%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 62.8.628 × 2012.6 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.

Affected

ProductAffectedFixed inSource

Power 9 AC922OP910–CNA

Power 9 AC922OP920–CNA

Power 9 AC922OP930–CNA

Power 9 AC922OP940–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

ibm (CNA)6.5CVSS:3.0/A:H/C:N/AV:N/I:L/AC:H/S:U/UI:N/PR:N/E:U/RC:C/RL:O

References

refibm.com/support/pages/node/6565075 refexchange.xforce.ibmcloud.com/vulnerabilities/221442