Vulnerability Description
IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot) via a flood of IP packets.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Sas Raid Module Firmware | <= 1.3.3.004 |
| Ibm | Sas Raid Module | - |
| Ibm | Sas Connectivity Module Firmware | <= 1.3.3.004 |
| Ibm | Sas Connectivity Module | - |
Related Weaknesses (CWE)
References
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93052
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93052
FAQ
What is CVE-2014-3018?
CVE-2014-3018 is a vulnerability with a CVSS score of 7.8 (HIGH). IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot) via a flood of IP packets.
How severe is CVE-2014-3018?
CVE-2014-3018 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3018?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Sas Raid Module Firmware, Ibm Sas Raid Module, Ibm Sas Connectivity Module Firmware, Ibm Sas Connectivity Module.