VULNERABILITY INTELLIGENCE
CVE-2012-6354
CVSS score7.5 HIGH
EPSS probability2.06%
CISA KEVNot currently listed
Published2013-02-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108