ibm power system s922 (9009-22g) firmware

Name: ibm power system s922 (9009-22g) firmware
Brand: ibm

productUS

cpe:2.3:o:ibm:power_system_s922_\(9009-22g\)_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high5medium1low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-45656US	—OT elevated	0.45% (39th)	—	no fix	2024-10-29	FW950.00 → FW950.C0
CVE-2026-16835US	—	0.36% (30th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16687US	—	0.35% (28th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-18681US	—	0.34% (27th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16832US	—	0.32% (25th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17414US	high8.8	0.30% (22nd)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-18821US	high8.8	0.29% (21st)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16828US	—	0.28% (21st)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17028US	—	0.28% (20th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16938US	—OT elevated	0.22% (13th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-18870US	medium4.3	0.18% (8th)	—	fw950.h4	2026-09-24	fw950.00 → fw950.h4
CVE-2026-93306US	high7.1	0.18% (7th)	—	fw950.h4	2026-09-25	fw950.00 → fw950.h4
CVE-2026-16933US	—	0.17% (6th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16707US	—	0.17% (6th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-16661US	—	0.17% (6th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17100US	—	0.17% (6th)	—	fw950.h3	2026-08-19	2 versions
CVE-2026-17093US	—	0.17% (6th)	—	fw950.h3	2026-08-19	2 versions
CVE-2026-18848US	—	0.15% (4th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17429US	—OT elevated	0.15% (4th)	—	fw950.h3	2026-08-19	2 versions
CVE-2026-17091US	—	0.15% (4th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-11885US	—	0.15% (4th)	—	fw950.h2	2026-07-30	fw950.00 → fw950.h2
CVE-2026-17097US	medium6.7	0.14% (4th)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17511US	low3.4	0.13% (3rd)	—	fw950.h4	2026-09-24	fw950.00 → fw950.h4
CVE-2026-4937US	medium6.0	0.13% (3rd)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-4936US	medium6.2	0.10% (1st)	—	fw950.h3	2026-08-19	fw950.00 → fw950.h3
CVE-2026-17504US	medium4.4	0.10% (1st)	—	fw950.h3	2026-09-24	fw950.00 → fw950.h3
CVE-2026-17503US	—	0.10% (1st)	—	fw950.h4	2026-09-24	fw950.00 → fw950.h4
CVE-2026-17413US	—	0.10% (1st)	—	fw950.h4	2026-09-24	fw950.00 → fw950.h4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-129Improper Validation of Array Index2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-331Insufficient Entropy2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan