Vulnerability Description
A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Storwize V7000 Firmware | 8.1 |
| Ibm | Storwize V7000 | - |
| Ibm | Storwize V5000 Firmware | 8.1 |
| Ibm | Storwize V5000 | - |
| Ibm | Flashsystem V9000 Firmware | 8.1 |
| Ibm | Flashsystem V9000 | - |
| Ibm | San Volume Controller Firmware | 8.1 |
| Ibm | San Volume Controller | - |
References
- http://www.ibm.com/support/docview.wss?uid=ssg1S1010788Issue TrackingVendor Advisory
- http://www.securityfocus.com/bid/101770Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039776Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134531Issue TrackingVDB EntryVendor Advisory
- http://www.ibm.com/support/docview.wss?uid=ssg1S1010788Issue TrackingVendor Advisory
- http://www.securityfocus.com/bid/101770Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039776Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134531Issue TrackingVDB EntryVendor Advisory
FAQ
What is CVE-2017-1710?
CVE-2017-1710 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.
How severe is CVE-2017-1710?
CVE-2017-1710 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-1710?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Storwize V7000 Firmware, Ibm Storwize V7000, Ibm Storwize V5000 Firmware, Ibm Storwize V5000, Ibm Flashsystem V9000 Firmware.