PT-2022-15437 · Ibm · Ibm Power9

Published 2022-07-18 · Updated 2022-07-27 · CVE-2022-22445

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

PR:H/S:C/AV:N/A:L/UI:N/AC:L/I:H/C:N

Name of the Vulnerable Software and Affected Versions IBM POWER9 (affected versions not specified)

Description An attacker that gains service access to the FSP or gains admin authority to a partition can compromise partition firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-22445

Affected Products

Ibm Power9

References · 5

• https://osv.dev/vulnerability/CVE-2022-22445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22445 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/224546 · Vendor Advisory
• https://ibm.com/support/pages/node/6604071 · Vendor Advisory
• https://t.me/cibsecurity/46496 · Telegram Post