What’s Vulnerable › Vulnerabilities

CVE-2014-4811

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-09-12 · updated 2026-06-17
• Weakness: CWE-255

Description

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.

Affected products

• IBM San Volume Controller Software: 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 (+48)
• IBM Storwize V3500: all versions
• IBM Storwize V3700: all versions
• IBM Storwize V5000: all versions
• IBM Storwize V7000: all versions

References

• http://secunia.com/advisories/61075
• http://www.ibm.com/support/docview.wss?uid=ssg1S1004846
• http://www.securityfocus.com/bid/69771
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95387
• http://secunia.com/advisories/61075
• http://www.ibm.com/support/docview.wss?uid=ssg1S1004846
• http://www.securityfocus.com/bid/69771
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95387

Get alerted when CVE-2014-4811 or the next vulnerability affects your stack