CVE-2014-4811: IBM San Volume Controller Software

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.

Affected products

• IBM San Volume Controller Software: version 6.1.0.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.4 only; version 6.1.0.5 only; …
• IBM Storwize v3500: affected versions not specified
• IBM Storwize v3700: affected versions not specified
• IBM Storwize v5000: affected versions not specified
• IBM Storwize v7000: affected versions not specified

Published 2014-09-12. Last modified 2026-06-17.