by Kastro
Paper/Archive/CVE-2024-45656

CVE-2024-45656

IBM Flexible Service Processor — IBM Flexible Service Processor hard coded credentials

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 38.8.388 × 207.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Affected

ProductAffectedFixed inSource
Flexible Service ProcessorFW860.00 – FW860.B3–CNA
Flexible Service ProcessorFW950.00 – FW950.C0–CNA
Flexible Service ProcessorFW1030.00 – FW1030.61–CNA
Flexible Service ProcessorFW1050.00 – FW1050.21–CNA
Flexible Service ProcessorFW1060.00 – FW1060.10–CNA

Scores by source

ibm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refibm.com/support/pages/node/7174183