{"cve":"CVE-2024-45656","nvd":{"published":"2024-10-29T01:15:03.823","modified":"2026-06-17T07:54:37.443","status":"Analyzed","description":"IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-798"],"references":["https://www.ibm.com/support/pages/node/7174183"],"products":["ibm:ess_5000_\\(5105-22e\\)_firmware","ibm:power_system_e1080_\\(9080-hex\\)_firmware","ibm:power_system_e850_\\(8408-e8e\\)_firmware","ibm:power_system_e850c_\\(8408-44e\\)_firmware","ibm:power_system_e870_\\(9119-mme\\)_firmware","ibm:power_system_e870c_\\(9080-mme\\)_firmware","ibm:power_system_e880_\\(9119-mhe\\)_firmware","ibm:power_system_e880c_\\(9080-mhe\\)_firmware","ibm:power_system_e950_\\(9040-mr9\\)_firmware","ibm:power_system_e980_\\(9080-m9s\\)_firmware","ibm:power_system_h922_\\(9223-22h\\)_firmware","ibm:power_system_h922_\\(9223-22s\\)_firmware","ibm:power_system_h924_\\(9223-42h\\)_firmware","ibm:power_system_h924_\\(9223-42s\\)_firmware","ibm:power_system_l922_\\(9008-22l\\)_firmware","ibm:power_system_s812_\\(8284-21a\\)_firmware","ibm:power_system_s812l_\\(8247-21l\\)_firmware","ibm:power_system_s814_\\(8286-41a\\)_firmware","ibm:power_system_s822_\\(8284-22a\\)_firmware","ibm:power_system_s822l_\\(8247-22l\\)_firmware","ibm:power_system_s824_\\(8286-42a\\)_firmware","ibm:power_system_s824l_\\(8247-42l\\)_firmware","ibm:power_system_s914_\\(9009-41a\\)_firmware","ibm:power_system_s914_\\(9009-41g\\)_firmware","ibm:power_system_s922_\\(9009-22a\\)_firmware","ibm:power_system_s922_\\(9009-22g\\)_firmware","ibm:power_system_s924_\\(9009-42a\\)_firmware","ibm:power_system_s924_\\(9009-42g\\)_firmware"],"source":"nvd","synced_at":"2026-10-19T21:56:33.105311382+00:00"},"epss":{"cve":"CVE-2024-45656","score":0.00446,"percentile":0.3884,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}