CVE-2014-4811 IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a dir...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm san volume controller software | = 6.1.0.0 | No fix listed |
| ibm san volume controller software | = 6.1.0.1 | No fix listed |
| ibm san volume controller software | = 6.1.0.2 | No fix listed |
| ibm san volume controller software | = 6.1.0.3 | No fix listed |
| ibm san volume controller software | = 6.1.0.4 | No fix listed |
| ibm san volume controller software | = 6.1.0.5 | No fix listed |
| ibm san volume controller software | = 6.1.0.6 | No fix listed |
| ibm san volume controller software | = 6.1.0.7 | No fix listed |
| ibm san volume controller software | = 6.1.0.8 | No fix listed |
| ibm san volume controller software | = 6.1.0.9 | No fix listed |
| ibm san volume controller software | = 6.1.0.10 | No fix listed |
| ibm san volume controller software | = 6.2.0.0 | No fix listed |
| ibm san volume controller software | = 6.2.0.1 | No fix listed |
| ibm san volume controller software | = 6.2.0.2 | No fix listed |
| ibm san volume controller software | = 6.2.0.3 | No fix listed |
| ibm san volume controller software | = 6.2.0.4 | No fix listed |
| ibm san volume controller software | = 6.2.0.5 | No fix listed |
| ibm san volume controller software | = 6.2.0.6 | No fix listed |
| ibm san volume controller software | = 6.3.0.0 | No fix listed |
| ibm san volume controller software | = 6.3.0.1 | No fix listed |
| ibm san volume controller software | = 6.3.0.2 | No fix listed |
| ibm san volume controller software | = 6.3.0.3 | No fix listed |
| ibm san volume controller software | = 6.3.0.4 | No fix listed |
| ibm san volume controller software | = 6.3.0.5 | No fix listed |
| ibm san volume controller software | = 6.3.0.6 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm san volume controller software | = 6.3.0.7 | No fix listed |
| ibm san volume controller software | = 6.4.0.0 | No fix listed |
| ibm san volume controller software | = 6.4.0.1 | No fix listed |
| ibm san volume controller software | = 6.4.0.2 | No fix listed |
| ibm san volume controller software | = 6.4.0.3 | No fix listed |
| ibm san volume controller software | = 6.4.0.4 | No fix listed |
| ibm san volume controller software | = 6.4.1.1 | No fix listed |
| ibm san volume controller software | = 6.4.1.2 | No fix listed |
| ibm san volume controller software | = 6.4.1.3 | No fix listed |
| ibm san volume controller software | = 6.4.1.4 | No fix listed |
| ibm san volume controller software | = 6.4.1.5 | No fix listed |
| ibm san volume controller software | = 6.4.1.6 | No fix listed |
| ibm san volume controller software | = 6.4.1.7 | No fix listed |
| ibm san volume controller software | = 6.4.1.8 | No fix listed |
| ibm san volume controller software | = 7.1.0.0 | No fix listed |
| ibm san volume controller software | = 7.1.0.1 | No fix listed |
| ibm san volume controller software | = 7.1.0.2 | No fix listed |
| ibm san volume controller software | = 7.1.0.3 | No fix listed |
| ibm san volume controller software | = 7.1.0.5 | No fix listed |
| ibm san volume controller software | = 7.1.0.6 | No fix listed |
| ibm san volume controller software | = 7.1.0.7 | No fix listed |
| ibm san volume controller software | = 7.2.0.0 | No fix listed |
| ibm san volume controller software | = 7.2.0.1 | No fix listed |
| ibm san volume controller software | = 7.2.0.2 | No fix listed |
| ibm san volume controller software | = 7.2.0.3 | No fix listed |
| ibm san volume controller software | = 7.2.0.4 | No fix listed |
| ibm san volume controller software | = 7.2.0.5 | No fix listed |
| ibm san volume controller software | = 7.2.0.6 | No fix listed |
| ibm san volume controller software | = 7.2.0.7 | No fix listed |
| ibm storwize v3500 | All versions | No fix listed |
| ibm storwize v3700 | All versions | No fix listed |
| ibm storwize v5000 | All versions | No fix listed |
| ibm storwize v7000 | All versions | No fix listed |
References
- 61075 third-party-advisory
- www.ibm.com patch vendor-advisory
- 69771 vdb-entry
- ibm-storwize-cve20144811-superuser(95387) vdb-entry