CVE-2024-45656

criticalpriority · track · 0OT risk · elevatedEPSS 0.004 · 39 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.45% (39th) EPSS

CVSS 9.8 · critical

Is it mine?

60 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · psirt@us.ibm.com USexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-798USCWE-798US

affected products (60)

Products and version ranges known to be affected.

IBM Flexible Service Processor≤ FW1030.00 ≤FW1030.61enisa_euvdEU
IBM Flexible Service Processor≤ FW1060.00 ≤FW1060.10enisa_euvdEU
IBM Flexible Service Processor≤ FW860.00 ≤FW860.B3enisa_euvdEU
IBM Flexible Service Processor≤ FW950.00 ≤FW950.C0enisa_euvdEU
IBM Flexible Service Processor≤ FW1050.00 ≤FW1050.21enisa_euvdEU
IBM Corp. IBM ESS 5000≤ 950.C1fstec_bduRU
IBM Corp. IBM Power System E1080≤ 1050.22fstec_bduRU
IBM Corp. IBM Power System E1080≤ 1060.11fstec_bduRU
IBM Corp. IBM Power System E1080≤ 1030.62fstec_bduRU
IBM Corp. IBM Power System E850≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E850C≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E870≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E870C≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E880≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E880C≤ 860.B4fstec_bduRU
IBM Corp. IBM Power System E950≤ 950.C1fstec_bduRU
IBM Corp. IBM Power System E980≤ 950.C1fstec_bduRU
IBM Corp. IBM Power System H922≤ 950.C1fstec_bduRU
IBM Corp. IBM Power System H924≤ 950.C1fstec_bduRU
IBM Corp. IBM Power System L922≤ 950.C1fstec_bduRU

showing 20 of 60

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2024-10-29modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan