CVE-2014-0880

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-29 · updated 2026-06-17

Description

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address.

Affected products

IBM Flex System V7000: all versions
IBM Flex System V7000 Software: 6.4.1.2, 6.4.1.3, 6.4.1.4, 6.4.1.5, 6.4.1.6, 6.4.1.7 (+9)
IBM SAN Volume Controller: all versions
IBM San Volume Controller Software: 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 (+42)
IBM Storwize V3500: all versions
IBM Storwize V3500 Software: 6.4.1.0, 6.4.1.1, 6.4.1.2, 6.4.1.3, 6.4.1.4, 6.4.1.5 (+11)
IBM Storwize V3700: all versions
IBM Storwize V3700 Software: 6.4.1.0, 6.4.1.1, 6.4.1.2, 6.4.1.3, 6.4.1.4, 6.4.1.5 (+12)
IBM Storwize V5000: all versions
IBM Storwize V5000 Software: 7.1.0.2, 7.1.0.3, 7.1.0.4, 7.1.0.5, 7.1.0.6, 7.1.0.7 (+3)
IBM Storwize V7000: all versions
IBM Storwize V7000 Software: 6.3.0.0, 6.3.0.1, 6.3.0.2, 6.3.0.3, 6.3.0.4, 6.3.0.5 (+24)

References

Get alerted when CVE-2014-0880 or the next vulnerability affects your stack