CVE-2013-0500

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-17 · updated 2026-06-16
Weakness: CWE-20

Description

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation.

Affected products

IBM Storwize V7000 Unified: all versions
IBM Storwize V7000 Unified Software: 1.3.0.0, 1.3.2.0, 1.3.2.3, 1.4.0.0, 1.4.0.4, 1.4.1.0 (+1)

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1004430
https://exchange.xforce.ibmcloud.com/vulnerabilities/84839
http://www.ibm.com/support/docview.wss?uid=ssg1S1004430
https://exchange.xforce.ibmcloud.com/vulnerabilities/84839

Get alerted when CVE-2013-0500 or the next vulnerability affects your stack