Firmware Downgrade Vulnerability in IBM Power 9 BMC
CVE-2022-22374

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Power 9 Ac922
Vendor
CVE Published:
24 March 2022

What is CVE-2022-22374?

The IBM Power 9 Baseboard Management Controller (BMC) is susceptible to a firmware downgrade attack that could hinder its functionality and impact the operation of its associated host systems. This vulnerability affects several models within the IBM Power 9 series, potentially exposing them to significant operational risks. It is crucial for users of these systems to address this vulnerability promptly to maintain secure and reliable operations.

Affected Version(s)

Power 9 AC922 OP910

Power 9 AC922 OP920

Power 9 AC922 OP930

References

https://www.ibm.com/support/pages/node/6565075
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/221442
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.