CVE-2024-45656: IBM Flexible Service Processor hard coded credentials

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-29 · updated 2026-06-17
Weakness: CWE-798

Description

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

Affected products

IBM Ess 5000 (5105-22E) Firmware: from FW950.00 through FW950.C0
IBM Power System E1080 (9080-Hex) Firmware: from FW1030.00 through FW1030.61; from FW1050.00 through FW1050.21; from FW1060.00 through FW1060.10
IBM Power System E850 (8408-E8E) Firmware: from FW860.00 through FW860.B3
IBM Power System E850C (8408-44E) Firmware: from FW860.00 through FW860.B3
IBM Power System E870 (9119-Mme) Firmware: from FW860.00 through FW860.B3
IBM Power System E870C (9080-Mme) Firmware: from FW860.00 through FW860.B3
IBM Power System E880 (9119-Mhe) Firmware: from FW860.00 through FW860.B3
IBM Power System E880C (9080-Mhe) Firmware: from FW860.00 through FW860.B3
IBM Power System E950 (9040-Mr9) Firmware: from FW950.00 through FW950.C0
IBM Power System E980 (9080-M9S) Firmware: from FW950.00 through FW950.C0
IBM Power System H922 (9223-22H) Firmware: from FW950.00 through FW950.C0
IBM Power System H922 (9223-22S) Firmware: from FW950.00 through FW950.C0
IBM Power System H924 (9223-42H) Firmware: from FW950.00 through FW950.C0
IBM Power System H924 (9223-42S) Firmware: from FW950.00 through FW950.C0
IBM Power System L922 (9008-22L) Firmware: from FW950.00 through FW950.C0
IBM Power System S812 (8284-21A) Firmware: from FW860.00 through FW860.B3
IBM Power System S812L (8247-21L) Firmware: from FW860.00 through FW860.B3
IBM Power System S814 (8286-41A) Firmware: from FW860.00 through FW860.B3
IBM Power System S822 (8284-22A) Firmware: from FW860.00 through FW860.B3
IBM Power System S822L (8247-22L) Firmware: from FW860.00 through FW860.B3
IBM Power System S824 (8286-42A) Firmware: from FW860.00 through FW860.B3
IBM Power System S824L (8247-42L) Firmware: from FW860.00 through FW860.B3
IBM Power System S914 (9009-41A) Firmware: from FW950.00 through FW950.C0
IBM Power System S914 (9009-41G) Firmware: from FW950.00 through FW950.C0
IBM Power System S922 (9009-22A) Firmware: from FW950.00 through FW950.C0
IBM Power System S922 (9009-22G) Firmware: from FW950.00 through FW950.C0
IBM Power System S924 (9009-42A) Firmware: from FW950.00 through FW950.C0
IBM Power System S924 (9009-42G) Firmware: from FW950.00 through FW950.C0

References

https://www.ibm.com/support/pages/node/7174183

Get alerted when CVE-2024-45656 or the next vulnerability affects your stack