CVE-2024-45656

Q: What is the severity of CVE-2024-45656?

CVE-2024-45656 has a CVSS score of 9.8 (CRITICAL). IBM Flexible Service Processor (FSP) firmware contains hardcoded credentials that could allow network users to gain service privileges. This affects multiple FSP firmware versions across various IBM server platforms. Attackers with network access could exploit these static credentials to compromise the service processor.

9.8 CRITICAL

Authentication Bypass

📋 TL;DR

IBM Flexible Service Processor (FSP) firmware contains hardcoded credentials that could allow network users to gain service privileges. This affects multiple FSP firmware versions across various IBM server platforms. Attackers with network access could exploit these static credentials to compromise the service processor.

💻 Affected Systems

Products:

IBM Flexible Service Processor (FSP)

Versions: FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, FW1060.00 through FW1060.10

Operating Systems: FSP firmware - not OS dependent

Default Config Vulnerable: ⚠️ Yes

Notes: Affects IBM Power Systems servers using vulnerable FSP firmware versions. The FSP is a separate management processor from the main server OS.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Full compromise of the service processor allowing attackers to gain administrative control over the FSP, potentially leading to server management takeover, data exfiltration, or denial of service.

🟠

Likely Case

Unauthorized access to the FSP management interface enabling configuration changes, monitoring data access, and potential privilege escalation to the host system.

🟢

If Mitigated

Limited impact if network segmentation isolates FSP interfaces and strong access controls are implemented, though the vulnerability remains present.

🌐 Internet-Facing: HIGH - If FSP interfaces are exposed to the internet, attackers can easily exploit the static credentials.

🏢 Internal Only: HIGH - Even internally, any network user could potentially access the FSP with the known credentials.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: LIKELY

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Exploitation requires only network access to the FSP interface and knowledge of the static credentials. No authentication bypass needed.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Apply firmware updates: FW860.B4 or later, FW950.C1 or later, FW1030.62 or later, FW1050.22 or later, FW1060.11 or later

Vendor Advisory: https://www.ibm.com/support/pages/node/7174183

Restart Required: Yes

Instructions:

1. Download appropriate firmware update from IBM Fix Central. 2. Apply update through FSP web interface or HMC. 3. Reboot the service processor. 4. Verify firmware version after update.

🔧 Temporary Workarounds

Network Segmentation

all

Isolate FSP management interfaces from general network access

Access Control Lists

all

Implement strict network ACLs to limit access to FSP interfaces

🧯 If You Can't Patch

Implement strict network segmentation to isolate FSP interfaces from untrusted networks
Monitor FSP access logs for unauthorized authentication attempts and credential use

🔍 How to Verify

Check if Vulnerable:

Check FSP firmware version through HMC or FSP web interface and compare against affected versions list

Check Version:

From HMC: lssyscfg -r sys -F state,type_model,serial_num,ipaddr

Verify Fix Applied:

Verify firmware version is updated to patched version through FSP interface

📡 Detection & Monitoring

Log Indicators:

Failed authentication attempts followed by successful logins
Multiple login attempts from unusual sources
Configuration changes from unexpected users

Network Indicators:

Network traffic to FSP management ports from unauthorized sources
Authentication attempts using default/service credentials

SIEM Query:

source="fsp_logs" AND (event_type="authentication" AND result="success") AND user="service_account"

📊 Metadata

CVE ID: CVE-2024-45656

CVSS v3 Score: 9.8 (CRITICAL)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-798

Published: October 29, 2024

Last Updated: December 3, 2025

🔗 References

https://www.ibm.com/support/pages/node/7174183 Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ess 5000 \(5105 22e\) Firmware by Ibm

Power System E1080 \(9080 Hex\) Firmware by Ibm

Power System E1080 \(9080 Hex\) Firmware by Ibm

Power System E1080 \(9080 Hex\) Firmware by Ibm

Power System E850 \(8408 E8e\) Firmware by Ibm

Power System E850c \(8408 44e\) Firmware by Ibm

Power System E870 \(9119 Mme\) Firmware by Ibm

Power System E870c \(9080 Mme\) Firmware by Ibm

Power System E880 \(9119 Mhe\) Firmware by Ibm

Power System E880c \(9080 Mhe\) Firmware by Ibm

Power System E950 \(9040 Mr9\) Firmware by Ibm

Power System E980 \(9080 M9s\) Firmware by Ibm

Power System H922 \(9223 22h\) Firmware by Ibm

Power System H922 \(9223 22s\) Firmware by Ibm

Power System H924 \(9223 42h\) Firmware by Ibm

Power System H924 \(9223 42s\) Firmware by Ibm

Power System L922 \(9008 22l\) Firmware by Ibm

Power System S812 \(8284 21a\) Firmware by Ibm

Power System S812l \(8247 21l\) Firmware by Ibm

Power System S814 \(8286 41a\) Firmware by Ibm

Power System S822 \(8284 22a\) Firmware by Ibm

Power System S822l \(8247 22l\) Firmware by Ibm

Power System S824 \(8286 42a\) Firmware by Ibm

Power System S824l \(8247 42l\) Firmware by Ibm

Power System S914 \(9009 41a\) Firmware by Ibm

Power System S914 \(9009 41g\) Firmware by Ibm

Power System S922 \(9009 22a\) Firmware by Ibm

Power System S922 \(9009 22g\) Firmware by Ibm

Power System S924 \(9009 42a\) Firmware by Ibm

Power System S924 \(9009 42g\) Firmware by Ibm

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Network Segmentation

Access Control Lists

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities