CVE-2012-2166: IBM Xiv Storage System 2810-114 Firmware

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remote attackers to gain user access via unknown vectors. IBM X-Force ID: 75041.

Affected products

• IBM Xiv Storage System 2810-114 Firmware: before 11.1.1 (fixed in 11.1.1)
• IBM Xiv Storage System 2810-a14 Firmware: before 10.2.4.e-2 (fixed in 10.2.4.e-2)
• IBM Xiv Storage System 2812-114 Firmware: before 11.1.1 (fixed in 11.1.1)
• IBM Xiv Storage System 2812-a14 Firmware: before 10.2.4.e-2 (fixed in 10.2.4.e-2)

Published 2018-02-08. Last modified 2026-06-16.