Power System H922 (9223 22H) Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:ibm:power_system_h922_\(9223-22h\)_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Power System H922 (9223 22H) Firmware (69a039a9-e88d-50f9-b692-92e5fc7e48b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45656 |
vulnerable | 2026-06-08 06:48:08.799951 |
IBM Flexible Service Processor hard coded credentials
CRITICAL (9.8)
IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.
Published: 2024-10-29T00:37:16.004Z
Updated: 2024-11-02T03:55:32.353Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1992 |
vulnerable | 2026-06-08 05:11:26.478454 |
Details available
MEDIUM (6.4)
The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.
Published: 2019-03-21T14:35:28.145Z
Updated: 2024-09-16T17:18:29.221Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.