IBM Xiv Storage System GEN3 vulnerabilities

2 CVEs affecting IBM Xiv Storage System GEN3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4829, published 2013-04-16.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-2167, published 2012-10-20. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unspecified ports.
• CVE-2012-4829, published 2013-04-16. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate…