CVEvulnerability
CVE-2014-4811
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.
Affected configurations
• ibm san volume controller software 6.1.0.0
• ibm san volume controller software 6.1.0.1
• ibm san volume controller software 6.1.0.2
• ibm san volume controller software 6.1.0.3
• ibm san volume controller software 6.1.0.4
• ibm san volume controller software 6.1.0.5
• ibm san volume controller software 6.1.0.6
• ibm san volume controller software 6.1.0.7
• ibm san volume controller software 6.1.0.8
• ibm san volume controller software 6.1.0.9
• ibm san volume controller software 6.1.0.10
• ibm san volume controller software 6.2.0.0
• ibm san volume controller software 6.2.0.1
• ibm san volume controller software 6.2.0.2
• ibm san volume controller software 6.2.0.3
• ibm san volume controller software 6.2.0.4
• ibm san volume controller software 6.2.0.5
• ibm san volume controller software 6.2.0.6
• ibm san volume controller software 6.3.0.0
• ibm san volume controller software 6.3.0.1
• ibm san volume controller software 6.3.0.2
• ibm san volume controller software 6.3.0.3
• ibm san volume controller software 6.3.0.4
• ibm san volume controller software 6.3.0.5
• ibm san volume controller software 6.3.0.6
• ibm san volume controller software 6.3.0.7
• ibm san volume controller software 6.4.0.0
• ibm san volume controller software 6.4.0.1
• ibm san volume controller software 6.4.0.2
• ibm san volume controller software 6.4.0.3
• ibm san volume controller software 6.4.0.4
• ibm san volume controller software 6.4.1.1
• ibm san volume controller software 6.4.1.2
• ibm san volume controller software 6.4.1.3
• ibm san volume controller software 6.4.1.4
• ibm san volume controller software 6.4.1.5
• ibm san volume controller software 6.4.1.6
• ibm san volume controller software 6.4.1.7
• ibm san volume controller software 6.4.1.8
• ibm san volume controller software 7.1.0.0
• ibm san volume controller software 7.1.0.1
• ibm san volume controller software 7.1.0.2
• ibm san volume controller software 7.1.0.3
• ibm san volume controller software 7.1.0.5
• ibm san volume controller software 7.1.0.6
• ibm san volume controller software 7.1.0.7
• ibm san volume controller software 7.2.0.0
• ibm san volume controller software 7.2.0.1
• ibm san volume controller software 7.2.0.2
• ibm san volume controller software 7.2.0.3
• ibm san volume controller software 7.2.0.4
• ibm san volume controller software 7.2.0.5
• ibm san volume controller software 7.2.0.6
• ibm san volume controller software 7.2.0.7
• ibm storwize v3500
• ibm storwize v3700
• ibm storwize v5000
• ibm storwize v7000
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/61075 secunia.com
- http://www.ibm.com/support/docview.wss?uid=ssg1S1004846 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/69771 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95387 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/61075 secunia.com
- http://www.ibm.com/support/docview.wss?uid=ssg1S1004846 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/69771 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95387 exchange.xforce.ibmcloud.com