CVE-2014-0880: IBM Flex System v7000

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address.

Affected products

  • IBM Flex System v7000
  • IBM Flex System v7000 Software: version 6.4.1.2 only; version 6.4.1.3 only; version 6.4.1.4 only; version 6.4.1.5 only; version 6.4.1.6 only; version 6.4.1.7 only; …
  • IBM San Volume Controller
  • IBM San Volume Controller Software: version 6.1.0.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.4 only; version 6.1.0.5 only; …
  • IBM Storwize v3500
  • IBM Storwize v3500 Software: version 6.4.1.0 only; version 6.4.1.1 only; version 6.4.1.2 only; version 6.4.1.3 only; version 6.4.1.4 only; version 6.4.1.5 only; …
  • IBM Storwize v3700
  • IBM Storwize v3700 Software: version 6.4.1.0 only; version 6.4.1.1 only; version 6.4.1.2 only; version 6.4.1.3 only; version 6.4.1.4 only; version 6.4.1.5 only; …
  • IBM Storwize v5000
  • IBM Storwize v5000 Software: version 7.1.0.2 only; version 7.1.0.3 only; version 7.1.0.4 only; version 7.1.0.5 only; version 7.1.0.6 only; version 7.1.0.7 only; …
  • IBM Storwize v7000
  • IBM Storwize v7000 Software: version 6.3.0.0 only; version 6.3.0.1 only; version 6.3.0.2 only; version 6.3.0.3 only; version 6.3.0.4 only; version 6.3.0.5 only; …

Published 2014-03-29. Last modified 2026-06-17.