CVE-2022-22309

Published: May 24, 2022Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.

Affected (3)

Products: Ibm: Power System S922 Firmware

Ibm

1 product

Power System S922 Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Power System S922 Firmware	From 860 to 860.b0
Ibm Power System S922 Firmware	From 940 to 940.60
Ibm Power System S922 Firmware	From 950 to 950.40

Running on/with	Platform Versions
Ibm Power System S922	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/217095

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6589099

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/217095

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6589099

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.