CVE-2014-0880: ibm flex_system_v7000_firmware
Vulnerability summary
CVE-2014-0880 is a high (CVSS 7.5) vulnerability in ibm flex_system_v7000_firmware. EPSS estimates a 1.95% chance of exploitation in the next 30 days, higher than 79.8% of scored vulnerabilities.
Timeline
- 29-03-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.95%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
+0.04 pp
From 1.91% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ibm12 products
- flex_system_v7000_firmwarena
- flex_system_v7000_software6.4.1.2 | 6.4.1.3 | 6.4.1.4 | 6.4.1.5 | 6.4.1.6 | 6.4.1.7 | 7.1.0.1 | 7.1.0.2 | 7.1.0.3 | 7.1.0.5 | 7.1.0.6 | 7.1.0.7 | 7.2.0.0 | 7.2.0.1 | 7.2.0.2
- san_volume_controller_firmwarena
- san_volume_controller_software6.1.0.0 | 6.1.0.1 | 6.1.0.2 | 6.1.0.3 | 6.1.0.4 | 6.1.0.5 | 6.1.0.6 | 6.1.0.7 | 6.1.0.8 | 6.1.0.9 | 6.1.0.10 | 6.2.0.0 | 6.2.0.1 | 6.2.0.2 | 6.2.0.3 | 6.2.0.4 | 6.2.0.5 | 6.2.0.6 | 6.3.0.0 | 6.3.0.1 | 6.3.0.2 | 6.3.0.3 | 6.3.0.4 | 6.3.0.5 | 6.3.0.6 | 6.3.0.7 | 6.4.0.0 | 6.4.0.1 | 6.4.0.2 | 6.4.0.3 | 6.4.0.4 | 6.4.1.1 | 6.4.1.2 | 6.4.1.3 | 6.4.1.4 | 6.4.1.5 | 6.4.1.6 | 6.4.1.7 | 7.1.0.0 | 7.1.0.1 | 7.1.0.2 | 7.1.0.3 | 7.1.0.5 | 7.1.0.6 | 7.1.0.7 | 7.2.0.0 | 7.2.0.1 | 7.2.0.2
- storwize_v3500_firmwarena
1 vendor · 12 products