San Volume Controller
Vendor:
First CVE: Mar 29, 2014 · Active for 12 years
15
Total CVEs
More Total CVEs than 92% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
13.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact San Volume Controller over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 29, 2014
12 years ago
Most Recent CVE
Aug 17, 2020
2,169 days ago
CVE Severity & Scoring
San Volume Controller15 CVEs
40%
40%
20%
All CVEs352,713 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (93.3%)
Unknown1 (6.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (80.0%)
High2 (13.3%)
Unknown1 (6.7%)
User Interaction
None12 (80.0%)
Unknown1 (6.7%)
Required2 (13.3%)
Privileges Required
Low8 (53.3%)
High0 (0.0%)
None6 (40.0%)
Unknown1 (6.7%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
CVE-2017-1710CRITICAL A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531. | Nov 13, 2017 | 9.8 | 32 | NO | NO |
CVE-2020-4686HIGH IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 1866 | Aug 17, 2020 | 8.1 | 26 | NO | NO |
CVE-2018-1434HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-1433HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.5 | 25 | NO | NO |
CVE-2018-1464MEDIUM IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 6.5 | 24 | NO | NO |
CVE-2018-1462HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.6 | 24 | NO | NO |
CVE-2018-1438HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.5 | 24 | NO | NO |
CVE-2018-1775MEDIUM IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files | Feb 27, 2019 | 6.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
2 CVEs
13.3% of CVEs· 98th percentile
Metasploit
1 CVE
6.7% of CVEs· 97th percentile
Nuclei
1 CVE
6.7% of CVEs· 97th percentile
ExploitDB
2 CVEs
13.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For San Volume Controller
Top CWEs
Versions
No cataloged versions.