VulnerabilityModified
CVE-2014-3019
IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.
MEDIUM 5.0EPSS 1.03%
Does this matter?
Lower severity and a low EPSS score (1.03%). Track it; it rarely justifies an emergency change on its own.
Description
IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.03% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/sas raid module firmware · ibm/sas connectivity module firmware
- Source
- psirt@us.ibm.com
References
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93054
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93054
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.