IBM Sas Connectivity Module Firmware vulnerabilities

2 CVEs affecting IBM Sas Connectivity Module Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3019, published 2015-01-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3018, published 2015-01-17. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot) via a flood of IP packets.
• CVE-2014-3019, published 2015-01-17. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.