CVE-2022-22309: IBM Power System s922 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.

Affected products

• IBM Power System s922 Firmware: from 860, before 860.b0 (fixed in 860.b0); from 940, before 940.60 (fixed in 940.60); from 950, before 950.40 (fixed in 950.40)

Published 2022-05-24. Last modified 2026-06-17.