CVE-2022-22488: IBM Power System AC922 (8335-Gtg) Firmware

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337.

Affected products

• IBM Power System AC922 (8335-Gtg) Firmware: from op910, up to and including op910.70
• IBM Power System AC922 (8335-Gth) Firmware: from op940, up to and including op940.40
• IBM Power System AC922 (8335-Gtx) Firmware: from op940, up to and including op940.40

Published 2022-12-12. Last modified 2026-06-17.