NetSight
high7.5

CVE-2014-4811

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuse…

Impact

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.

Affected products

VendorProductAffected versions
IbmSan Volume Controller Software
Versions 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5
IbmStorwize V3500
All versions
IbmStorwize V3700
All versions
IbmStorwize V5000
All versions
IbmStorwize V7000
All versions

Weakness classification

References