Lucene search
IbmCVE-2022-22488HistoryDec 12, 2022 - 1:15 p.m.
CVE-2022-22488
2022-12-1213:15:12
CWE-770
ibm
web.nvd.nist.gov
186
2
ibm
openbmc
op910
op940
denial of service
vulnerability
nvd
cve-2022-22488
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
32.8%
IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337.
Affected configurations
Node
ibmpower_system_ac922_\(8335-gtg\)_firmwareRangeop910–op910.70
ibmpower_system_ac922_\(8335-gtg\)Match-
Node
ibmpower_system_ac922_\(8335-gth\)Match-
ibmpower_system_ac922_\(8335-gth\)_firmwareRangeop940–op940.40
Node
ibmpower_system_ac922_\(8335-gtx\)Match-
ibmpower_system_ac922_\(8335-gtx\)_firmwareRangeop940–op940.40
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | power_system_ac922_\(8335-gtg\)_firmware | * | cpe:2.3:o:ibm:power_system_ac922_\(8335-gtg\)_firmware:*:*:*:*:*:*:*:* |
| ibm | power_system_ac922_\(8335-gtg\) | - | cpe:2.3:h:ibm:power_system_ac922_\(8335-gtg\):-:*:*:*:*:*:*:* |
| ibm | power_system_ac922_\(8335-gth\) | - | cpe:2.3:h:ibm:power_system_ac922_\(8335-gth\):-:*:*:*:*:*:*:* |
| ibm | power_system_ac922_\(8335-gth\)_firmware | * | cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:*:*:*:*:*:*:*:* |
| ibm | power_system_ac922_\(8335-gtx\) | - | cpe:2.3:h:ibm:power_system_ac922_\(8335-gtx\):-:*:*:*:*:*:*:* |
| ibm | power_system_ac922_\(8335-gtx\)_firmware | * | cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "OpenBMC",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "OP910, OP940"
}
]
}
]Social References
More
Related
prion
prion
Buffer overflow
2022-12-12 13:15:00
cvelist
cvelist
CVE-2022-22488 IBM OpenBMC denial of service
2022-11-18 17:02:01
nvd
nvd
CVE-2022-22488
2022-12-12 13:15:12
ibm
ibm
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
32.8%
Related for CVE-2022-22488