CVE-2012-2166

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-2166
IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remote attackers to gain user access via unknown vectors. IBM X-Force ID: 75041.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75041 VDB Entry Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75041 VDB Entry Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ibm:xiv_storage_system_2810-a14_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:xiv_storage_system_2810-a14:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:ibm:xiv_storage_system_2812-a14_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:xiv_storage_system_2812-a14:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:ibm:xiv_storage_system_2810-114_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:xiv_storage_system_2810-114:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:ibm:xiv_storage_system_2812-114_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:xiv_storage_system_2812-114:-:*:*:*:*:*:*:*
History

21 Nov 2024, 01:38

Type Values Removed Values Added
References () http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/75041 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/75041 - VDB Entry, Vendor Advisory
Information

Published : 2018-02-08 23:29

Updated : 2024-11-21 01:38

NVD link : CVE-2012-2166

Mitre link : CVE-2012-2166

CVE.ORG link : CVE-2012-2166

JSON object : View

Products Affected

ibm

  • xiv_storage_system_2810-114_firmware
  • xiv_storage_system_2810-a14
  • xiv_storage_system_2812-114
  • xiv_storage_system_2812-a14_firmware
  • xiv_storage_system_2812-a14
  • xiv_storage_system_2810-114
  • xiv_storage_system_2810-a14_firmware
  • xiv_storage_system_2812-114_firmware
CWE
CWE-798

Use of Hard-coded Credentials