IBM Storwize v7000 vulnerabilities

3 CVEs affecting IBM Storwize v7000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-4811, published 2014-09-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-4811, published 2014-09-12. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a…
CVE-2012-6354, published 2013-02-19. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
CVE-2014-0880, published 2014-03-29. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain…