PT-2014-3917 · Ibm · Storwize V5000+5

Published 2014-03-29 · Updated 2017-08-29 · CVE-2014-0880

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller versions 6.3 through 6.4 before 6.4.1.8 IBM SAN Volume Controller versions 7.1 through 7.2 before 7.2.0.3 Storwize V3500 versions 6.3 through 6.4 before 6.4.1.8 Storwize V3500 versions 7.1 through 7.2 before 7.2.0.3 Storwize V3700 versions 6.3 through 6.4 before 6.4.1.8 Storwize V3700 versions 7.1 through 7.2 before 7.2.0.3 Storwize V5000 versions 6.3 through 6.4 before 6.4.1.8 Storwize V5000 versions 7.1 through 7.2 before 7.2.0.3 Storwize V7000 versions 6.3 through 6.4 before 6.4.1.8 Storwize V7000 versions 7.1 through 7.2 before 7.2.0.3 Flex System V7000 versions 6.3 through 6.4 before 6.4.1.8 Flex System V7000 versions 7.1 through 7.2 before 7.2.0.3

Description The issue allows remote attackers to obtain CLI access and cause a denial of service via unspecified traffic to the administrative IP address.

Recommendations For IBM SAN Volume Controller versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For IBM SAN Volume Controller versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V3500 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V3500 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V3700 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V3700 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V5000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V5000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Storwize V7000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Storwize V7000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later. For Flex System V7000 versions 6.3 through 6.4 before 6.4.1.8, update to version 6.4.1.8 or later. For Flex System V7000 versions 7.1 through 7.2 before 7.2.0.3, update to version 7.2.0.3 or later.

Fix

Related Identifiers

CVE-2014-0880

Affected Products

Flex System V7000

Ibm San Volume Controller

Storwize V3500

Storwize V3700

Storwize V5000

Storwize V7000

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0880 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91145 · Note