CVE-2022-22374: IBM Power 9 AC922 Firmware

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.

Affected products

• IBM Power 9 AC922 Firmware: version op910 only; version op920 only; version op930 only; version op940 only

Published 2022-03-24. Last modified 2026-06-17.