CVE-2022-22374: Critical severity openbmc-project openbmc vulnerability
The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.
Other sources
The BMC may be subject to downgrade attack which may affect its ability to operate its host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22374?
CVE-2022-22374 is classified as a high-severity vulnerability due to its potential to compromise the operational integrity of affected BMC systems.
How do I fix CVE-2022-22374?
To fix CVE-2022-22374, ensure that your BMC firmware is updated to the latest version and disable any unnecessary downgrade pathways.
Which IBM products are affected by CVE-2022-22374?
CVE-2022-22374 affects IBM Power 9 systems, specifically the OP910, OP920, OP930, and OP940 versions.
What impact does CVE-2022-22374 have on system operations?
CVE-2022-22374 can lead to firmware downgrade attacks that may disrupt the BMC's functionality and subsequently affect the host system's operations.
Is there a workaround for CVE-2022-22374?
Currently, the recommended mitigation for CVE-2022-22374 is to keep the BMC firmware updated and to implement security policies that restrict firmware changes.