PT-2014-3917 · Ibm · Storwize V5000+5

Publicado

2014-03-29

·

Atualizado

2017-08-29

·

CVE-2014-0880

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller versions 6.3 through 6.4 before 6.4.1.8 IBM SAN Volume Controller versions 7.1 through 7.2 before 7.2.0.3 Storwize V3500 versions 6.3 through 6.4 before 6.4.1.8 Storwize V3500 versions 7.1 through 7.2 before 7.2.0.3 Storwize V3700 versions 6.3 through 6.4 before 6.4.1.8 Storwize V3700 versions 7.1 through 7.2 before 7.2.0.3 Storwize V5000 versions 6.3 through 6.4 before 6.4.1.8 Storwize V5000 versions 7.1 through 7.2 before 7.2.0.3 Storwize V7000 versions 6.3 through 6.4 before 6.4.1.8 Storwize V7000 versions 7.1 through 7.2 before 7.2.0.3 Flex System V7000 versions 6.3 through 6.4 before 6.4.1.8 Flex System V7000 versions 7.1 through 7.2 before 7.2.0.3
Description The issue allows remote attackers to obtain CLI access and cause a denial of service via unspecified traffic to the administrative IP address.
Recommendations For IBM SAN Volume Controller versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For IBM SAN Volume Controller versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V3500 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V3500 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V3700 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V3700 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V5000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V5000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V7000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V7000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Flex System V7000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Flex System V7000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2014-0880

Produtos afetados

Flex System V7000
Ibm San Volume Controller
Storwize V3500
Storwize V3700
Storwize V5000
Storwize V7000