medium6.8
CVE-2022-22309
The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface.
Impact
The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Power System S922 Firmware | from 860 before 860.b0 from 940 before 940.60 from 950 before 950.40 |