CVE-2024-45656

IBM Flexible Service Processor hard coded credentials

State: Published
Severity: 9.8 Critical
Published: Oct 29, 2024
Updated: Nov 2, 2024
Reserved: Sep 3, 2024

Description

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	ibm

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Flexible Service ProcessorIBM	FW860.00 through FW860.B3Affected FW950.00 through FW950.C0Affected FW1030.00 through FW1030.61Affected FW1050.00 through FW1050.21Affected FW1060.00 through FW1060.10Affected

References

https://www.ibm.com/support/pages/node/7174183

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.