IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| San_volume_controller_software | Ibm | 6.1.0.0 (including) | 6.1.0.0 (including) |
| San_volume_controller_software | Ibm | 6.1.0.1 (including) | 6.1.0.1 (including) |
| San_volume_controller_software | Ibm | 6.1.0.2 (including) | 6.1.0.2 (including) |
| San_volume_controller_software | Ibm | 6.1.0.3 (including) | 6.1.0.3 (including) |
| San_volume_controller_software | Ibm | 6.1.0.4 (including) | 6.1.0.4 (including) |
| San_volume_controller_software | Ibm | 6.1.0.5 (including) | 6.1.0.5 (including) |
| San_volume_controller_software | Ibm | 6.1.0.6 (including) | 6.1.0.6 (including) |
| San_volume_controller_software | Ibm | 6.1.0.7 (including) | 6.1.0.7 (including) |
| San_volume_controller_software | Ibm | 6.1.0.8 (including) | 6.1.0.8 (including) |
| San_volume_controller_software | Ibm | 6.1.0.9 (including) | 6.1.0.9 (including) |
| San_volume_controller_software | Ibm | 6.1.0.10 (including) | 6.1.0.10 (including) |
| San_volume_controller_software | Ibm | 6.2.0.0 (including) | 6.2.0.0 (including) |
| San_volume_controller_software | Ibm | 6.2.0.1 (including) | 6.2.0.1 (including) |
| San_volume_controller_software | Ibm | 6.2.0.2 (including) | 6.2.0.2 (including) |
| San_volume_controller_software | Ibm | 6.2.0.3 (including) | 6.2.0.3 (including) |
| San_volume_controller_software | Ibm | 6.2.0.4 (including) | 6.2.0.4 (including) |
| San_volume_controller_software | Ibm | 6.2.0.5 (including) | 6.2.0.5 (including) |
| San_volume_controller_software | Ibm | 6.2.0.6 (including) | 6.2.0.6 (including) |
| San_volume_controller_software | Ibm | 6.3.0.0 (including) | 6.3.0.0 (including) |
| San_volume_controller_software | Ibm | 6.3.0.1 (including) | 6.3.0.1 (including) |
| San_volume_controller_software | Ibm | 6.3.0.2 (including) | 6.3.0.2 (including) |
| San_volume_controller_software | Ibm | 6.3.0.3 (including) | 6.3.0.3 (including) |
| San_volume_controller_software | Ibm | 6.3.0.4 (including) | 6.3.0.4 (including) |
| San_volume_controller_software | Ibm | 6.3.0.5 (including) | 6.3.0.5 (including) |
| San_volume_controller_software | Ibm | 6.3.0.6 (including) | 6.3.0.6 (including) |
| San_volume_controller_software | Ibm | 6.3.0.7 (including) | 6.3.0.7 (including) |
| San_volume_controller_software | Ibm | 6.4.0.0 (including) | 6.4.0.0 (including) |
| San_volume_controller_software | Ibm | 6.4.0.1 (including) | 6.4.0.1 (including) |
| San_volume_controller_software | Ibm | 6.4.0.2 (including) | 6.4.0.2 (including) |
| San_volume_controller_software | Ibm | 6.4.0.3 (including) | 6.4.0.3 (including) |
| San_volume_controller_software | Ibm | 6.4.0.4 (including) | 6.4.0.4 (including) |
| San_volume_controller_software | Ibm | 6.4.1.1 (including) | 6.4.1.1 (including) |
| San_volume_controller_software | Ibm | 6.4.1.2 (including) | 6.4.1.2 (including) |
| San_volume_controller_software | Ibm | 6.4.1.3 (including) | 6.4.1.3 (including) |
| San_volume_controller_software | Ibm | 6.4.1.4 (including) | 6.4.1.4 (including) |
| San_volume_controller_software | Ibm | 6.4.1.5 (including) | 6.4.1.5 (including) |
| San_volume_controller_software | Ibm | 6.4.1.6 (including) | 6.4.1.6 (including) |
| San_volume_controller_software | Ibm | 6.4.1.7 (including) | 6.4.1.7 (including) |
| San_volume_controller_software | Ibm | 6.4.1.8 (including) | 6.4.1.8 (including) |
| San_volume_controller_software | Ibm | 7.1.0.0 (including) | 7.1.0.0 (including) |
| San_volume_controller_software | Ibm | 7.1.0.1 (including) | 7.1.0.1 (including) |
| San_volume_controller_software | Ibm | 7.1.0.2 (including) | 7.1.0.2 (including) |
| San_volume_controller_software | Ibm | 7.1.0.3 (including) | 7.1.0.3 (including) |
| San_volume_controller_software | Ibm | 7.1.0.5 (including) | 7.1.0.5 (including) |
| San_volume_controller_software | Ibm | 7.1.0.6 (including) | 7.1.0.6 (including) |
| San_volume_controller_software | Ibm | 7.1.0.7 (including) | 7.1.0.7 (including) |
| San_volume_controller_software | Ibm | 7.2.0.0 (including) | 7.2.0.0 (including) |
| San_volume_controller_software | Ibm | 7.2.0.1 (including) | 7.2.0.1 (including) |
| San_volume_controller_software | Ibm | 7.2.0.2 (including) | 7.2.0.2 (including) |
| San_volume_controller_software | Ibm | 7.2.0.3 (including) | 7.2.0.3 (including) |
| San_volume_controller_software | Ibm | 7.2.0.4 (including) | 7.2.0.4 (including) |
| San_volume_controller_software | Ibm | 7.2.0.5 (including) | 7.2.0.5 (including) |
| San_volume_controller_software | Ibm | 7.2.0.6 (including) | 7.2.0.6 (including) |
| San_volume_controller_software | Ibm | 7.2.0.7 (including) | 7.2.0.7 (including) |
| Storwize_v3500 | Ibm | - (including) | - (including) |
| Storwize_v3700 | Ibm | - (including) | - (including) |
| Storwize_v5000 | Ibm | - (including) | - (including) |
| Storwize_v7000 | Ibm | - (including) | - (including) |