CVE-2012-6354
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows...
CVE-2012-6354 is a high vulnerability (CVSS 7.5) in Ibm Storwize V7000, published February 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.06%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Exploit likelihood
Affected products
What each source reports
NVD Score used 7.5
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
- Record
CVE-2012-6354- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE ListNo score
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
- Record
CVE-2012-6354- Updated
- 2026-11-02
EUVDEUVD-2012-6209No score
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
- Record
EUVD-2012-6209- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c694-qrv8-m3rqNo score
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows...
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
- Record
GHSA-c694-qrv8-m3rq- Weakness
- CWE-287
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.