Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4811

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.

Published

2014-09-12T01:55:07.513

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm san_volume_controller_software 6.1.0.0 Yes
Application ibm san_volume_controller_software 6.1.0.1 Yes
Application ibm san_volume_controller_software 6.1.0.2 Yes
Application ibm san_volume_controller_software 6.1.0.3 Yes
Application ibm san_volume_controller_software 6.1.0.4 Yes
Application ibm san_volume_controller_software 6.1.0.5 Yes
Application ibm san_volume_controller_software 6.1.0.6 Yes
Application ibm san_volume_controller_software 6.1.0.7 Yes
Application ibm san_volume_controller_software 6.1.0.8 Yes
Application ibm san_volume_controller_software 6.1.0.9 Yes
Application ibm san_volume_controller_software 6.1.0.10 Yes
Application ibm san_volume_controller_software 6.2.0.0 Yes
Application ibm san_volume_controller_software 6.2.0.1 Yes
Application ibm san_volume_controller_software 6.2.0.2 Yes
Application ibm san_volume_controller_software 6.2.0.3 Yes
Application ibm san_volume_controller_software 6.2.0.4 Yes
Application ibm san_volume_controller_software 6.2.0.5 Yes
Application ibm san_volume_controller_software 6.2.0.6 Yes
Application ibm san_volume_controller_software 6.3.0.0 Yes
Application ibm san_volume_controller_software 6.3.0.1 Yes
Application ibm san_volume_controller_software 6.3.0.2 Yes
Application ibm san_volume_controller_software 6.3.0.3 Yes
Application ibm san_volume_controller_software 6.3.0.4 Yes
Application ibm san_volume_controller_software 6.3.0.5 Yes
Application ibm san_volume_controller_software 6.3.0.6 Yes
Application ibm san_volume_controller_software 6.3.0.7 Yes
Application ibm san_volume_controller_software 6.4.0.0 Yes
Application ibm san_volume_controller_software 6.4.0.1 Yes
Application ibm san_volume_controller_software 6.4.0.2 Yes
Application ibm san_volume_controller_software 6.4.0.3 Yes
Application ibm san_volume_controller_software 6.4.0.4 Yes
Application ibm san_volume_controller_software 6.4.1.1 Yes
Application ibm san_volume_controller_software 6.4.1.2 Yes
Application ibm san_volume_controller_software 6.4.1.3 Yes
Application ibm san_volume_controller_software 6.4.1.4 Yes
Application ibm san_volume_controller_software 6.4.1.5 Yes
Application ibm san_volume_controller_software 6.4.1.6 Yes
Application ibm san_volume_controller_software 6.4.1.7 Yes
Application ibm san_volume_controller_software 6.4.1.8 Yes
Application ibm san_volume_controller_software 7.1.0.0 Yes
Application ibm san_volume_controller_software 7.1.0.1 Yes
Application ibm san_volume_controller_software 7.1.0.2 Yes
Application ibm san_volume_controller_software 7.1.0.3 Yes
Application ibm san_volume_controller_software 7.1.0.5 Yes
Application ibm san_volume_controller_software 7.1.0.6 Yes
Application ibm san_volume_controller_software 7.1.0.7 Yes
Application ibm san_volume_controller_software 7.2.0.0 Yes
Application ibm san_volume_controller_software 7.2.0.1 Yes
Application ibm san_volume_controller_software 7.2.0.2 Yes
Application ibm san_volume_controller_software 7.2.0.3 Yes
Application ibm san_volume_controller_software 7.2.0.4 Yes
Application ibm san_volume_controller_software 7.2.0.5 Yes
Application ibm san_volume_controller_software 7.2.0.6 Yes
Application ibm san_volume_controller_software 7.2.0.7 Yes
Hardware ibm storwize_v3500 - Yes
Hardware ibm storwize_v3700 - Yes
Hardware ibm storwize_v5000 - Yes
Hardware ibm storwize_v7000 - Yes
References