CVE-2022-22309

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface

Medium · published May 24, 2022

CVSS v3.0
6.8
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:P/UI:N/A:H/C:H/S:U/AC:L/I:H/PR:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Published
2022-05-24T16:20Z
EPSS history
Timeline
  • 24 MAY 16:20Z
    The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface
    cvelistv5