CVE-2025-0160 is a critical vulnerability affecting IBM FlashSystem (IBM Storage Virtualize) versions 8.5.0.0 through 8.7.2.1. This flaw allows a remote attacker with system access to execute arbitrary Java code due to improper restrictions in the RPCAdapter service. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity and no user interaction required. While currently not listed on CISA KEV or having public exploit code (Metasploit, Nuclei, ExploitDB), its high FAUCET Risk Score of 87/100 indicates significant potential danger. There is minimal community discussion or media coverage at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 8.5, < 8.5.0.14CPE matchmatch criteria | cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:* | ||
>= 8.5.2.0, <= 8.5.2.3CPE matchmatch criteria | cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:* | ||
>= 8.6.0.0, < 8.6.0.6CPE matchmatch criteria | cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:* | ||
>= 8.7.0.0, < 8.7.0.3CPE matchmatch criteria | cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:* | ||
8.5.1.0CPE matchmatch criteria | cpe:2.3:a:ibm:storage_virtualize:8.5.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.