CVE-2018-1775medium

CVE-2018-1775: medium-severity vulnerability in IBM SAN Volume Controller

Published · Updated

Follow this CVE+ Monitor Spectrum Virtualize+ Monitor FlashSystem

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.9%
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.
CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:T
Affected products
IBM · FlashSystem 9100 FamilyIBM · FlashSystem V9000IBM · SAN Volume ControllerIBM · Spectrum Virtualize for Public CloudIBM · Spectrum Virtualize SoftwareIBM · torwize V3500IBM · torwize V3700IBM · torwize V5000IBM · torwize V7000
Related CVEs — IBM SAN Volume Controller

In the same product, most dangerous first.

CVE-2018-1464—CVE-2018-1464EPSS 1.6%CVE-2021-29873HIGHCVE-2021-29873EPSS 1.5%CVE-2018-1463—CVE-2018-1463EPSS 1.4%CVE-2018-1465—CVE-2018-1465EPSS 1.3%CVE-2018-1462—CVE-2018-1462EPSS 1.2%CVE-2018-1461—CVE-2018-1461EPSS 1.0%