IBM Flashsystem v9000 Firmware vulnerabilities

3 CVEs affecting IBM Flashsystem v9000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4686, published 2020-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1710, published 2017-11-13. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.
CVE-2020-4686, published 2020-08-17. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.
CVE-2015-7446, published 2016-03-12. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of…