CVE-2007-3232: IBM Totalstorage DS400

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000.

Affected products

• IBM Totalstorage DS400: version 4.15 only

Published 2007-06-15. Last modified 2026-06-16.