CVE-2014-4811: High severity ibm san volume controller vulnerability
IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4811?
CVE-2014-4811 has a medium severity level, as it allows remote attackers to reset the administrator superuser password.
How do I fix CVE-2014-4811?
To fix CVE-2014-4811, upgrade to the latest version of IBM SAN Volume Controller or Storwize firmware that addresses this vulnerability.
Which devices are affected by CVE-2014-4811?
CVE-2014-4811 affects IBM Storwize 3500, 3700, 5000, 7000 devices, and SAN Volume Controller versions prior to 7.2.0.8.
What actions can I take to mitigate CVE-2014-4811?
To mitigate CVE-2014-4811, restrict access to the management IP address and monitor system logs for unauthorized access attempts.
Is my data at risk with CVE-2014-4811?
Yes, if exploited, CVE-2014-4811 could potentially allow unauthorized users to gain administrative access and jeopardize your data security.