Vulnerability Description
IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Sas Raid Module Firmware | <= 1.3.3.004 |
| Ibm | Sas Raid Module | - |
| Ibm | Sas Connectivity Module Firmware | <= 1.3.3.004 |
| Ibm | Sas Connectivity Module | - |
Related Weaknesses (CWE)
References
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93054
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096774PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93054
FAQ
What is CVE-2014-3019?
CVE-2014-3019 is a vulnerability with a CVSS score of 5.0 (MEDIUM). IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.
How severe is CVE-2014-3019?
CVE-2014-3019 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3019?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Sas Raid Module Firmware, Ibm Sas Raid Module, Ibm Sas Connectivity Module Firmware, Ibm Sas Connectivity Module.