CVE-2024-45656

IBM Flexible Service Processor hard coded credentials

Published Oct 29, 2024 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

IBM

Flexible Service Processor

unaffected

Version	Status	Constraints
`FW860.00`	affected	≤ FW860.B3
`FW950.00`	affected	≤ FW950.C0
`FW1030.00`	affected	≤ FW1030.61
`FW1050.00`	affected	≤ FW1050.21
`FW1060.00`	affected	≤ FW1060.10

Configuration 1 [-]

AND

OR	cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware::::::::
	cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware::::::::
	cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware::::::::

cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:ibm:power_system_l922_\(9008-22l\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_l922_\(9008-22l\):-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:ibm:power_system_s922_\(9009-22a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s922_\(9009-22a\):-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:ibm:power_system_h922_\(9223-22h\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_h922_\(9223-22h\):-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:ibm:power_system_s914_\(9009-41a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s914_\(9009-41a\):-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:ibm:power_system_s914_\(9009-41g\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:ibm:power_system_s924_\(9009-42a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s924_\(9009-42a\):-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:ibm:power_system_s924_\(9009-42g\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:ibm:power_system_h924_\(9223-42h\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_h924_\(9223-42h\):-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_h924_\(9223-42s\):-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:ibm:ess_5000_\(5105-22e\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:ess_5000_\(5105-22e\):-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:ibm:power_system_s812_\(8284-21a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s812_\(8284-21a\):-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:ibm:power_system_s822_\(8284-22a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s822_\(8284-22a\):-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:ibm:power_system_s814_\(8286-41a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s814_\(8286-41a\):-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:ibm:power_system_s824_\(8286-42a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s824_\(8286-42a\):-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:ibm:power_system_s812l_\(8247-21l\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s812l_\(8247-21l\):-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:ibm:power_system_s822l_\(8247-22l\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s822l_\(8247-22l\):-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:ibm:power_system_s824l_\(8247-42l\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_s824l_\(8247-42l\):-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:ibm:power_system_e850_\(8408-e8e\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e850_\(8408-e8e\):-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:ibm:power_system_e850c_\(8408-44e\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e850c_\(8408-44e\):-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:ibm:power_system_e870_\(9119-mme\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e870_\(9119-mme\):-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:ibm:power_system_e880_\(9119-mhe\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e880_\(9119-mhe\):-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:ibm:power_system_e870c_\(9080-mme\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e870c_\(9080-mme\):-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:ibm:power_system_e880c_\(9080-mhe\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:power_system_e880c_\(9080-mhe\):-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-41548	IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.446% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
https://www.ibm.com/support/pages/node/7174183

History

Dec 3, 2025 6:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Ibm ess 5000 \(5105-22e\) Ibm ess 5000 \(5105-22e\) Firmware Ibm power System E1080 \(9080-hex\) Ibm power System E1080 \(9080-hex\) Firmware Ibm power System E850 \(8408-e8e\) Ibm power System E850 \(8408-e8e\) Firmware Ibm power System E850c \(8408-44e\) Ibm power System E850c \(8408-44e\) Firmware Ibm power System E870 \(9119-mme\) Ibm power System E870 \(9119-mme\) Firmware Ibm power System E870c \(9080-mme\) Ibm power System E870c \(9080-mme\) Firmware Ibm power System E880 \(9119-mhe\) Ibm power System E880 \(9119-mhe\) Firmware Ibm power System E880c \(9080-mhe\) Ibm power System E880c \(9080-mhe\) Firmware Ibm power System E950 \(9040-mr9\) Ibm power System E950 \(9040-mr9\) Firmware Ibm power System E980 \(9080-m9s\) Ibm power System E980 \(9080-m9s\) Firmware Ibm power System H922 \(9223-22h\) Ibm power System H922 \(9223-22h\) Firmware Ibm power System H922 \(9223-22s\) Ibm power System H922 \(9223-22s\) Firmware Ibm power System H924 \(9223-42h\) Ibm power System H924 \(9223-42h\) Firmware Ibm power System H924 \(9223-42s\) Ibm power System H924 \(9223-42s\) Firmware Ibm power System L922 \(9008-22l\) Ibm power System L922 \(9008-22l\) Firmware Ibm power System S812 \(8284-21a\) Ibm power System S812 \(8284-21a\) Firmware Ibm power System S812l \(8247-21l\) Ibm power System S812l \(8247-21l\) Firmware Ibm power System S814 \(8286-41a\) Ibm power System S814 \(8286-41a\) Firmware Ibm power System S822 \(8284-22a\) Ibm power System S822 \(8284-22a\) Firmware Ibm power System S822l \(8247-22l\) Ibm power System S822l \(8247-22l\) Firmware Ibm power System S824 \(8286-42a\) Ibm power System S824 \(8286-42a\) Firmware Ibm power System S824l \(8247-42l\) Ibm power System S824l \(8247-42l\) Firmware Ibm power System S914 \(9009-41a\) Ibm power System S914 \(9009-41a\) Firmware Ibm power System S914 \(9009-41g\) Ibm power System S914 \(9009-41g\) Firmware Ibm power System S922 \(9009-22a\) Ibm power System S922 \(9009-22a\) Firmware Ibm power System S922 \(9009-22g\) Ibm power System S922 \(9009-22g\) Firmware Ibm power System S924 \(9009-42a\) Ibm power System S924 \(9009-42a\) Firmware Ibm power System S924 \(9009-42g\) Ibm power System S924 \(9009-42g\) Firmware
CPEs		cpe:2.3:h:ibm:ess_5000_\(5105-22e\):-:::::::* cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:::::::* cpe:2.3:h:ibm:power_system_e850_\(8408-e8e\):-:::::::* cpe:2.3:h:ibm:power_system_e850c_\(8408-44e\):-:::::::* cpe:2.3:h:ibm:power_system_e870_\(9119-mme\):-:::::::* cpe:2.3:h:ibm:power_system_e870c_\(9080-mme\):-:::::::* cpe:2.3:h:ibm:power_system_e880_\(9119-mhe\):-:::::::* cpe:2.3:h:ibm:power_system_e880c_\(9080-mhe\):-:::::::* cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:::::::* cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:::::::* cpe:2.3:h:ibm:power_system_h922_\(9223-22h\):-:::::::* cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:::::::* cpe:2.3:h:ibm:power_system_h924_\(9223-42h\):-:::::::* cpe:2.3:h:ibm:power_system_h924_\(9223-42s\):-:::::::* cpe:2.3:h:ibm:power_system_l922_\(9008-22l\):-:::::::* cpe:2.3:h:ibm:power_system_s812_\(8284-21a\):-:::::::* cpe:2.3:h:ibm:power_system_s812l_\(8247-21l\):-:::::::* cpe:2.3:h:ibm:power_system_s814_\(8286-41a\):-:::::::* cpe:2.3:h:ibm:power_system_s822_\(8284-22a\):-:::::::* cpe:2.3:h:ibm:power_system_s822l_\(8247-22l\):-:::::::* cpe:2.3:h:ibm:power_system_s824_\(8286-42a\):-:::::::* cpe:2.3:h:ibm:power_system_s824l_\(8247-42l\):-:::::::* cpe:2.3:h:ibm:power_system_s914_\(9009-41a\):-:::::::* cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:::::::* cpe:2.3:h:ibm:power_system_s922_\(9009-22a\):-:::::::* cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:::::::* cpe:2.3:h:ibm:power_system_s924_\(9009-42a\):-:::::::* cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:::::::* cpe:2.3:o:ibm:ess_5000_\(5105-22e\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e850_\(8408-e8e\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e850c_\(8408-44e\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e870_\(9119-mme\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e870c_\(9080-mme\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e880_\(9119-mhe\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e880c_\(9080-mhe\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:::::::: cpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:::::::: cpe:2.3:o:ibm:power_system_h922_\(9223-22h\)_firmware:::::::: cpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:::::::: cpe:2.3:o:ibm:power_system_h924_\(9223-42h\)_firmware:::::::: cpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:::::::: cpe:2.3:o:ibm:power_system_l922_\(9008-22l\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s812_\(8284-21a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s812l_\(8247-21l\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s814_\(8286-41a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s822_\(8284-22a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s822l_\(8247-22l\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s824_\(8286-42a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s824l_\(8247-42l\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s914_\(9009-41a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s914_\(9009-41g\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s922_\(9009-22a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s924_\(9009-42a\)_firmware:::::::: cpe:2.3:o:ibm:power_system_s924_\(9009-42g\)_firmware::::::::
Vendors & Products		Ibm ess 5000 \(5105-22e\) Ibm ess 5000 \(5105-22e\) Firmware Ibm power System E1080 \(9080-hex\) Ibm power System E1080 \(9080-hex\) Firmware Ibm power System E850 \(8408-e8e\) Ibm power System E850 \(8408-e8e\) Firmware Ibm power System E850c \(8408-44e\) Ibm power System E850c \(8408-44e\) Firmware Ibm power System E870 \(9119-mme\) Ibm power System E870 \(9119-mme\) Firmware Ibm power System E870c \(9080-mme\) Ibm power System E870c \(9080-mme\) Firmware Ibm power System E880 \(9119-mhe\) Ibm power System E880 \(9119-mhe\) Firmware Ibm power System E880c \(9080-mhe\) Ibm power System E880c \(9080-mhe\) Firmware Ibm power System E950 \(9040-mr9\) Ibm power System E950 \(9040-mr9\) Firmware Ibm power System E980 \(9080-m9s\) Ibm power System E980 \(9080-m9s\) Firmware Ibm power System H922 \(9223-22h\) Ibm power System H922 \(9223-22h\) Firmware Ibm power System H922 \(9223-22s\) Ibm power System H922 \(9223-22s\) Firmware Ibm power System H924 \(9223-42h\) Ibm power System H924 \(9223-42h\) Firmware Ibm power System H924 \(9223-42s\) Ibm power System H924 \(9223-42s\) Firmware Ibm power System L922 \(9008-22l\) Ibm power System L922 \(9008-22l\) Firmware Ibm power System S812 \(8284-21a\) Ibm power System S812 \(8284-21a\) Firmware Ibm power System S812l \(8247-21l\) Ibm power System S812l \(8247-21l\) Firmware Ibm power System S814 \(8286-41a\) Ibm power System S814 \(8286-41a\) Firmware Ibm power System S822 \(8284-22a\) Ibm power System S822 \(8284-22a\) Firmware Ibm power System S822l \(8247-22l\) Ibm power System S822l \(8247-22l\) Firmware Ibm power System S824 \(8286-42a\) Ibm power System S824 \(8286-42a\) Firmware Ibm power System S824l \(8247-42l\) Ibm power System S824l \(8247-42l\) Firmware Ibm power System S914 \(9009-41a\) Ibm power System S914 \(9009-41a\) Firmware Ibm power System S914 \(9009-41g\) Ibm power System S914 \(9009-41g\) Firmware Ibm power System S922 \(9009-22a\) Ibm power System S922 \(9009-22a\) Firmware Ibm power System S922 \(9009-22g\) Ibm power System S922 \(9009-22g\) Firmware Ibm power System S924 \(9009-42a\) Ibm power System S924 \(9009-42a\) Firmware Ibm power System S924 \(9009-42g\) Ibm power System S924 \(9009-42g\) Firmware

Jul 15, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00096}`	epss `{'score': 0.00102}`

Oct 29, 2024 1:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Oct 29, 2024 1:00 AM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.
Title		IBM Flexible Service Processor hard coded credentials
First Time appeared		Ibm Ibm power9 System Firmware
Weaknesses		CWE-798
CPEs		cpe:2.3:o:ibm:power9_system_firmware:fw1030.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw860.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw950.00:::::::*
Vendors & Products		Ibm Ibm power9 System Firmware
References		https://www.ibm.com/support/pages/node/7174183
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Subscriptions

Ibm Ess 5000 \(5105-22e\) Ess 5000 \(5105-22e\) Firmware Power9 System Firmware Power System E1080 \(9080-hex\) Power System E1080 \(9080-hex\) Firmware Power System E850 \(8408-e8e\) Power System E850 \(8408-e8e\) Firmware Power System E850c \(8408-44e\) Power System E850c \(8408-44e\) Firmware Power System E870 \(9119-mme\) Power System E870 \(9119-mme\) Firmware Power System E870c \(9080-mme\) Power System E870c \(9080-mme\) Firmware Power System E880 \(9119-mhe\) Power System E880 \(9119-mhe\) Firmware Power System E880c \(9080-mhe\) Power System E880c \(9080-mhe\) Firmware Power System E950 \(9040-mr9\) Power System E950 \(9040-mr9\) Firmware Power System E980 \(9080-m9s\) Power System E980 \(9080-m9s\) Firmware Power System H922 \(9223-22h\) Power System H922 \(9223-22h\) Firmware Power System H922 \(9223-22s\) Power System H922 \(9223-22s\) Firmware Power System H924 \(9223-42h\) Power System H924 \(9223-42h\) Firmware Power System H924 \(9223-42s\) Power System H924 \(9223-42s\) Firmware Power System L922 \(9008-22l\) Power System L922 \(9008-22l\) Firmware Power System S812 \(8284-21a\) Power System S812 \(8284-21a\) Firmware Power System S812l \(8247-21l\) Power System S812l \(8247-21l\) Firmware Power System S814 \(8286-41a\) Power System S814 \(8286-41a\) Firmware Power System S822 \(8284-22a\) Power System S822 \(8284-22a\) Firmware Power System S822l \(8247-22l\) Power System S822l \(8247-22l\) Firmware Power System S824 \(8286-42a\) Power System S824 \(8286-42a\) Firmware Power System S824l \(8247-42l\) Power System S824l \(8247-42l\) Firmware Power System S914 \(9009-41a\) Power System S914 \(9009-41a\) Firmware Power System S914 \(9009-41g\) Power System S914 \(9009-41g\) Firmware Power System S922 \(9009-22a\) Power System S922 \(9009-22a\) Firmware Power System S922 \(9009-22g\) Power System S922 \(9009-22g\) Firmware Power System S924 \(9009-42a\) Power System S924 \(9009-42a\) Firmware Power System S924 \(9009-42g\) Power System S924 \(9009-42g\) Firmware

Weaknesses