PT-2025-47207 · Ibm · Ibm Storage Virtualize

Published 2025-11-14 · Updated 2025-12-08 · CVE-2025-36118

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storage Virtualize versions 8.4 through 9.1

Description The IKEv1 implementation contains a flaw that could allow remote attackers to obtain sensitive information from device memory during a Security Association (SA) negotiation request.

Recommendations IBM Storage Virtualize version 8.4 should be updated. IBM Storage Virtualize version 8.5 should be updated. IBM Storage Virtualize version 8.7 should be updated. IBM Storage Virtualize version 9.1 should be updated.

Fix

Weakness Enumeration

CWE-244

Related Identifiers

BDU:2025-14685

CVE-2025-36118

Affected Products

Ibm Storage Virtualize

References · 9

• https://bdu.fstec.ru/vul/2025-14685 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36118 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36118 · Vendor Advisory
• https://ibm.com/support/pages/node/7250954 · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1990646664571375813 · Twitter Post
• https://t.me/cveNotify/145135 · Telegram Post
• https://twitter.com/CVEnew/status/1990529162483044787 · Twitter Post
• https://t.me/CVEtracker/37544 · Telegram Post
• https://twitter.com/CCBalert/status/1990800035664064659 · Twitter Post