CVE-2024-45656: IBM Ess 5000 (5105-22e) Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Affected products

  • IBM Ess 5000 (5105-22e) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System e1080 (9080-Hex) Firmware: from FW1030.00, up to and including FW1030.61; from FW1050.00, up to and including FW1050.21; from FW1060.00, up to and including FW1060.10
  • IBM Power System e850 (8408-e8e) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e850c (8408-44e) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e870 (9119-Mme) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e870c (9080-Mme) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e880 (9119-Mhe) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e880c (9080-Mhe) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System e950 (9040-MR9) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System e980 (9080-m9s) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System h922 (9223-22h) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System h922 (9223-22s) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System h924 (9223-42h) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System h924 (9223-42s) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System l922 (9008-22l) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System s812 (8284-21a) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s812l (8247-21l) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s814 (8286-41a) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s822 (8284-22a) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s822l (8247-22l) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s824 (8286-42a) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s824l (8247-42l) Firmware: from FW860.00, up to and including FW860.B3
  • IBM Power System s914 (9009-41a) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System s914 (9009-41g) Firmware: from FW950.00, up to and including FW950.C0
  • IBM Power System s922 (9009-22a) Firmware: from FW950.00, up to and including FW950.C0
  • and 3 more

Published 2024-10-29. Last modified 2026-06-17.