CVE Vulnerabilities

CVE-2022-22374

Published: Mar 24, 2022 | Modified: Nov 21, 2024
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
8.5 HIGH
AV:N/AC:L/Au:N/C:N/I:P/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.

Affected Software

NameVendorStart VersionEnd Version
Power_9_ac922_firmwareIbmop910 (including)op910 (including)
Power_9_ac922_firmwareIbmop920 (including)op920 (including)
Power_9_ac922_firmwareIbmop930 (including)op930 (including)
Power_9_ac922_firmwareIbmop940 (including)op940 (including)

References