CVE-2014-0880: High severity IBM Storwize V7000 Software vulnerability

Published Mar 29, 2014
·
Updated

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address.

Affected Software

286 affected components
IBM Storwize V7000 Software=6.3.0.0
IBM Storwize V7000 Software=6.3.0.1
IBM Storwize V7000 Software=6.3.0.2
IBM Storwize V7000 Software=6.3.0.3
IBM Storwize V7000 Software=6.3.0.4
IBM Storwize V7000 Software=6.3.0.5
IBM Storwize V7000 Software=6.3.0.6
IBM Storwize V7000 Software=6.3.0.7
IBM Storwize V7000 Software=6.4.0.0
IBM Storwize V7000 Software=6.4.0.1
IBM Storwize V7000 Software=6.4.0.2
IBM Storwize V7000 Software=6.4.0.3
IBM Storwize V7000 Software=6.4.0.4
IBM Storwize V7000 Software=6.4.1.1
IBM Storwize V7000 Software=6.4.1.2
IBM Storwize V7000 Software=6.4.1.3
IBM Storwize V7000 Software=6.4.1.4
IBM Storwize V7000 Software=6.4.1.5
IBM Storwize V7000 Software=6.4.1.6
IBM Storwize V7000 Software=6.4.1.7
IBM Storwize V7000 Software=7.1.0.0
IBM Storwize V7000 Software=7.1.0.1
IBM Storwize V7000 Software=7.1.0.2
IBM Storwize V7000 Software=7.1.0.3
IBM Storwize V7000 Software=7.1.0.5
IBM Storwize V7000 Software=7.1.0.6
IBM Storwize V7000 Software=7.1.0.7
IBM Storwize V7000 Software=7.2.0.0
IBM Storwize V7000 Software=7.2.0.1
IBM Storwize V7000 Software=7.2.0.2
IBM Storwize V7000
IBM Flex System V7000 Software=6.4.1.2
IBM Flex System V7000 Software=6.4.1.3
IBM Flex System V7000 Software=6.4.1.4
IBM Flex System V7000 Software=6.4.1.5
IBM Flex System V7000 Software=6.4.1.6
IBM Flex System V7000 Software=6.4.1.7
IBM Flex System V7000 Software=7.1.0.1
IBM Flex System V7000 Software=7.1.0.2
IBM Flex System V7000 Software=7.1.0.3
IBM Flex System V7000 Software=7.1.0.5
IBM Flex System V7000 Software=7.1.0.6
IBM Flex System V7000 Software=7.1.0.7
IBM Flex System V7000 Software=7.2.0.0
IBM Flex System V7000 Software=7.2.0.1
IBM Flex System V7000 Software=7.2.0.2
IBM Flex System V7000
IBM Storwize V3700 Software=6.4.1.0
IBM Storwize V3700 Software=6.4.1.1
IBM Storwize V3700 Software=6.4.1.2
IBM Storwize V3700 Software=6.4.1.3
IBM Storwize V3700 Software=6.4.1.4
IBM Storwize V3700 Software=6.4.1.5
IBM Storwize V3700 Software=6.4.1.6
IBM Storwize V3700 Software=6.4.1.7
IBM Storwize V3700 Software=7.1.0.0
IBM Storwize V3700 Software=7.1.0.1
IBM Storwize V3700 Software=7.1.0.2
IBM Storwize V3700 Software=7.1.0.3
IBM Storwize V3700 Software=7.1.0.5
IBM Storwize V3700 Software=7.1.0.6
IBM Storwize V3700 Software=7.1.0.7
IBM Storwize V3700 Software=7.2.0.0
IBM Storwize V3700 Software=7.2.0.1
IBM Storwize V3700 Software=7.2.0.2
IBM Storwize V3700
IBM Storwize V3500 Software=6.4.1.0
IBM Storwize V3500 Software=6.4.1.1
IBM Storwize V3500 Software=6.4.1.2
IBM Storwize V3500 Software=6.4.1.3
IBM Storwize V3500 Software=6.4.1.4
IBM Storwize V3500 Software=6.4.1.5
IBM Storwize V3500 Software=6.4.1.6
IBM Storwize V3500 Software=6.4.1.7
IBM Storwize V3500 Software=7.1.0.0
IBM Storwize V3500 Software=7.1.0.1
IBM Storwize V3500 Software=7.1.0.2
IBM Storwize V3500 Software=7.1.0.3
IBM Storwize V3500 Software=7.1.0.5
IBM Storwize V3500 Software=7.1.0.6
IBM Storwize V3500 Software=7.2.0.0
IBM Storwize V3500 Software=7.2.0.1
IBM Storwize V3500 Software=7.2.0.2
IBM Storwize V3500
IBM San Volume Controller Software=6.1.0.0
IBM San Volume Controller Software=6.1.0.1
IBM San Volume Controller Software=6.1.0.2
IBM San Volume Controller Software=6.1.0.3
IBM San Volume Controller Software=6.1.0.4
IBM San Volume Controller Software=6.1.0.5
IBM San Volume Controller Software=6.1.0.6
IBM San Volume Controller Software=6.1.0.7
IBM San Volume Controller Software=6.1.0.8
IBM San Volume Controller Software=6.1.0.9
IBM San Volume Controller Software=6.1.0.10
IBM San Volume Controller Software=6.2.0.0
IBM San Volume Controller Software=6.2.0.1
IBM San Volume Controller Software=6.2.0.2
IBM San Volume Controller Software=6.2.0.3
IBM San Volume Controller Software=6.2.0.4
IBM San Volume Controller Software=6.2.0.5
IBM San Volume Controller Software=6.2.0.6
IBM San Volume Controller Software=6.3.0.0
IBM San Volume Controller Software=6.3.0.1
IBM San Volume Controller Software=6.3.0.2
IBM San Volume Controller Software=6.3.0.3
IBM San Volume Controller Software=6.3.0.4
IBM San Volume Controller Software=6.3.0.5
IBM San Volume Controller Software=6.3.0.6
IBM San Volume Controller Software=6.3.0.7
IBM San Volume Controller Software=6.4.0.0
IBM San Volume Controller Software=6.4.0.1
IBM San Volume Controller Software=6.4.0.2
IBM San Volume Controller Software=6.4.0.3
IBM San Volume Controller Software=6.4.0.4
IBM San Volume Controller Software=6.4.1.1
IBM San Volume Controller Software=6.4.1.2
IBM San Volume Controller Software=6.4.1.3
IBM San Volume Controller Software=6.4.1.4
IBM San Volume Controller Software=6.4.1.5
IBM San Volume Controller Software=6.4.1.6
IBM San Volume Controller Software=6.4.1.7
IBM San Volume Controller Software=7.1.0.0
IBM San Volume Controller Software=7.1.0.1
IBM San Volume Controller Software=7.1.0.2
IBM San Volume Controller Software=7.1.0.3
IBM San Volume Controller Software=7.1.0.5
IBM San Volume Controller Software=7.1.0.6
IBM San Volume Controller Software=7.1.0.7
IBM San Volume Controller Software=7.2.0.0
IBM San Volume Controller Software=7.2.0.1
IBM San Volume Controller Software=7.2.0.2
IBM SAN Volume Controller
IBM Storwize V5000 Software=7.1.0.2
IBM Storwize V5000 Software=7.1.0.3
IBM Storwize V5000 Software=7.1.0.4
IBM Storwize V5000 Software=7.1.0.5
IBM Storwize V5000 Software=7.1.0.6
IBM Storwize V5000 Software=7.1.0.7
IBM Storwize V5000 Software=7.2.0.0
IBM Storwize V5000 Software=7.2.0.1
IBM Storwize V5000 Software=7.2.0.2
IBM Storwize V5000
All of the following
Any of the following
IBM Storwize V7000 Software=6.3.0.0
IBM Storwize V7000 Software=6.3.0.1
IBM Storwize V7000 Software=6.3.0.2
IBM Storwize V7000 Software=6.3.0.3
IBM Storwize V7000 Software=6.3.0.4
IBM Storwize V7000 Software=6.3.0.5
IBM Storwize V7000 Software=6.3.0.6
IBM Storwize V7000 Software=6.3.0.7
IBM Storwize V7000 Software=6.4.0.0
IBM Storwize V7000 Software=6.4.0.1
IBM Storwize V7000 Software=6.4.0.2
IBM Storwize V7000 Software=6.4.0.3
IBM Storwize V7000 Software=6.4.0.4
IBM Storwize V7000 Software=6.4.1.1
IBM Storwize V7000 Software=6.4.1.2
IBM Storwize V7000 Software=6.4.1.3
IBM Storwize V7000 Software=6.4.1.4
IBM Storwize V7000 Software=6.4.1.5
IBM Storwize V7000 Software=6.4.1.6
IBM Storwize V7000 Software=6.4.1.7
IBM Storwize V7000 Software=7.1.0.0
IBM Storwize V7000 Software=7.1.0.1
IBM Storwize V7000 Software=7.1.0.2
IBM Storwize V7000 Software=7.1.0.3
IBM Storwize V7000 Software=7.1.0.5
IBM Storwize V7000 Software=7.1.0.6
IBM Storwize V7000 Software=7.1.0.7
IBM Storwize V7000 Software=7.2.0.0
IBM Storwize V7000 Software=7.2.0.1
IBM Storwize V7000 Software=7.2.0.2
IBM Storwize V7000
All of the following
Any of the following
IBM Flex System V7000 Software=6.4.1.2
IBM Flex System V7000 Software=6.4.1.3
IBM Flex System V7000 Software=6.4.1.4
IBM Flex System V7000 Software=6.4.1.5
IBM Flex System V7000 Software=6.4.1.6
IBM Flex System V7000 Software=6.4.1.7
IBM Flex System V7000 Software=7.1.0.1
IBM Flex System V7000 Software=7.1.0.2
IBM Flex System V7000 Software=7.1.0.3
IBM Flex System V7000 Software=7.1.0.5
IBM Flex System V7000 Software=7.1.0.6
IBM Flex System V7000 Software=7.1.0.7
IBM Flex System V7000 Software=7.2.0.0
IBM Flex System V7000 Software=7.2.0.1
IBM Flex System V7000 Software=7.2.0.2
IBM Flex System V7000
All of the following
Any of the following
IBM Storwize V3700 Software=6.4.1.0
IBM Storwize V3700 Software=6.4.1.1
IBM Storwize V3700 Software=6.4.1.2
IBM Storwize V3700 Software=6.4.1.3
IBM Storwize V3700 Software=6.4.1.4
IBM Storwize V3700 Software=6.4.1.5
IBM Storwize V3700 Software=6.4.1.6
IBM Storwize V3700 Software=6.4.1.7
IBM Storwize V3700 Software=7.1.0.0
IBM Storwize V3700 Software=7.1.0.1
IBM Storwize V3700 Software=7.1.0.2
IBM Storwize V3700 Software=7.1.0.3
IBM Storwize V3700 Software=7.1.0.5
IBM Storwize V3700 Software=7.1.0.6
IBM Storwize V3700 Software=7.1.0.7
IBM Storwize V3700 Software=7.2.0.0
IBM Storwize V3700 Software=7.2.0.1
IBM Storwize V3700 Software=7.2.0.2
IBM Storwize V3700
All of the following
Any of the following
IBM Storwize V3500 Software=6.4.1.0
IBM Storwize V3500 Software=6.4.1.1
IBM Storwize V3500 Software=6.4.1.2
IBM Storwize V3500 Software=6.4.1.3
IBM Storwize V3500 Software=6.4.1.4
IBM Storwize V3500 Software=6.4.1.5
IBM Storwize V3500 Software=6.4.1.6
IBM Storwize V3500 Software=6.4.1.7
IBM Storwize V3500 Software=7.1.0.0
IBM Storwize V3500 Software=7.1.0.1
IBM Storwize V3500 Software=7.1.0.2
IBM Storwize V3500 Software=7.1.0.3
IBM Storwize V3500 Software=7.1.0.5
IBM Storwize V3500 Software=7.1.0.6
IBM Storwize V3500 Software=7.2.0.0
IBM Storwize V3500 Software=7.2.0.1
IBM Storwize V3500 Software=7.2.0.2
IBM Storwize V3500
All of the following
Any of the following
IBM San Volume Controller Software=6.1.0.0
IBM San Volume Controller Software=6.1.0.1
IBM San Volume Controller Software=6.1.0.2
IBM San Volume Controller Software=6.1.0.3
IBM San Volume Controller Software=6.1.0.4
IBM San Volume Controller Software=6.1.0.5
IBM San Volume Controller Software=6.1.0.6
IBM San Volume Controller Software=6.1.0.7
IBM San Volume Controller Software=6.1.0.8
IBM San Volume Controller Software=6.1.0.9
IBM San Volume Controller Software=6.1.0.10
IBM San Volume Controller Software=6.2.0.0
IBM San Volume Controller Software=6.2.0.1
IBM San Volume Controller Software=6.2.0.2
IBM San Volume Controller Software=6.2.0.3
IBM San Volume Controller Software=6.2.0.4
IBM San Volume Controller Software=6.2.0.5
IBM San Volume Controller Software=6.2.0.6
IBM San Volume Controller Software=6.3.0.0
IBM San Volume Controller Software=6.3.0.1
IBM San Volume Controller Software=6.3.0.2
IBM San Volume Controller Software=6.3.0.3
IBM San Volume Controller Software=6.3.0.4
IBM San Volume Controller Software=6.3.0.5
IBM San Volume Controller Software=6.3.0.6
IBM San Volume Controller Software=6.3.0.7
IBM San Volume Controller Software=6.4.0.0
IBM San Volume Controller Software=6.4.0.1
IBM San Volume Controller Software=6.4.0.2
IBM San Volume Controller Software=6.4.0.3
IBM San Volume Controller Software=6.4.0.4
IBM San Volume Controller Software=6.4.1.1
IBM San Volume Controller Software=6.4.1.2
IBM San Volume Controller Software=6.4.1.3
IBM San Volume Controller Software=6.4.1.4
IBM San Volume Controller Software=6.4.1.5
IBM San Volume Controller Software=6.4.1.6
IBM San Volume Controller Software=6.4.1.7
IBM San Volume Controller Software=7.1.0.0
IBM San Volume Controller Software=7.1.0.1
IBM San Volume Controller Software=7.1.0.2
IBM San Volume Controller Software=7.1.0.3
IBM San Volume Controller Software=7.1.0.5
IBM San Volume Controller Software=7.1.0.6
IBM San Volume Controller Software=7.1.0.7
IBM San Volume Controller Software=7.2.0.0
IBM San Volume Controller Software=7.2.0.1
IBM San Volume Controller Software=7.2.0.2
IBM SAN Volume Controller
All of the following
Any of the following
IBM Storwize V5000 Software=7.1.0.2
IBM Storwize V5000 Software=7.1.0.3
IBM Storwize V5000 Software=7.1.0.4
IBM Storwize V5000 Software=7.1.0.5
IBM Storwize V5000 Software=7.1.0.6
IBM Storwize V5000 Software=7.1.0.7
IBM Storwize V5000 Software=7.2.0.0
IBM Storwize V5000 Software=7.2.0.1
IBM Storwize V5000 Software=7.2.0.2
IBM Storwize V5000

Event History

Mar 29, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:55 AM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2014-0880?

CVE-2014-0880 is rated as medium severity due to the potential for remote attackers to access system components.

2

How do I fix CVE-2014-0880?

To fix CVE-2014-0880, it is recommended to upgrade to versions 6.4.1.8, 7.2.0.3 or higher of the affected IBM software.

3

What systems are affected by CVE-2014-0880?

CVE-2014-0880 affects IBM SAN Volume Controller, IBM Storwize V3500, V3700, V5000, V7000, and IBM Flex System V7000 running vulnerable software versions.

4

Can CVE-2014-0880 lead to denial of service?

Yes, CVE-2014-0880 can allow remote attackers to cause a denial of service through unauthorized administrative access.

5

Is there a workaround for CVE-2014-0880?

As of now, the best mitigation for CVE-2014-0880 is applying the recommended software updates to secure your systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203