CVE-2022-22488

published 2022-12-12

CVE-2022-22488: IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of…

Priority P4 19 medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C N I N A H

IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	openbmc	—	—
ibm	power_system_ac922_firmware	op910 – op910.70	—
ibm	power_system_ac922_firmware	op940 – op940.40	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770