Known vulnerabilities in FlashSystem V840 9846-AE1 & 9848-AE1

Vendor: IBM Corporation
Software: FlashSystem V840 9846-AE1 & 9848-AE1
Software CPE: cpe:2.3:a:ibm_corporation:flashsystem_v840_9846-ae1_and_9848-ae1:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 23
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FlashSystem V840 9846-AE1 & 9848-AE1 FlashSystem V840 9846-AE1 & 9848-AE1 is affected by 23 known vulnerabilities: 7 critical, 1 high, 14 medium, 1 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68588 - Permissions, Privileges, and Access Controls
CVE-2014-0112		 CWE-264 High
Available
No
 - 22.10.2022 SB2014042909
SB2023022233
SB20240417121
and 2 more
#VU64554 - Integer overflow
CVE-2014-0099		 CWE-190 Medium
No
No
 1.1.3.2 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 2 more
#VU64548 - Integer overflow
CVE-2014-0075		 CWE-190 Medium
No
No
 1.1.3.2 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 2 more
#VU5328 - Off-by-one Error
CVE-2014-7187		 CWE-193 Critical
Available
No
 1.1.2.7 24.01.2017 SB2014091201
SB2015092701
SB2014100401
and 24 more
#VU5327 - Memory corruption
CVE-2014-7186		 CWE-119 Critical
Available
No
 1.1.2.7 24.01.2017 SB2014091201
SB2015092701
SB2014100401
and 26 more
#VU5322 - Command injection
CVE-2014-6278		 CWE-77 Critical
Available
Exploited
 1.1.2.7 24.01.2017 SB2014091201
SB2015100901
SB2014100401
and 19 more
#VU5310 - Memory corruption
CVE-2014-6277		 CWE-119 Critical
Available
No
 1.1.2.7 24.01.2017 SB2014091201
SB2015100901
SB2014100401
and 18 more
#VU5295 - Command injection
CVE-2014-6271		 CWE-77 Critical
Available
Exploited
 1.1.2.7 24.01.2017 SB2014091201
SB2015092401
SB2015092613
and 46 more
#VU5294 - Command injection
CVE-2014-7169		 CWE-77 Critical
Available
Exploited
 1.1.2.7 24.01.2017 SB2014091201
SB2015092501
SB2015092502
and 37 more
#VU5234 - Permissions, Privileges, and Access Controls
CVE-2014-0094		 CWE-264 Critical
Available
No
 - 23.01.2017 SB2014030201
SB2023022233
SB2023071327
and 2 more
#VU5233 - Resource exhaustion
CVE-2014-0050		 CWE-400 Medium
Available
No
 - 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 12 more
#VU5213 - Missing release of memory after effective lifetime
CVE-2014-3567		 CWE-401 Medium
No
No
 1.1.3.2 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 20 more
#VU5212 - Missing release of memory after effective lifetime
CVE-2014-3513		 CWE-401 Medium
No
No
 1.1.3.2 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 14 more
#VU41407 - Improper input validation
CVE-2014-3505		 CWE-20 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41408 - Resource Management Errors
CVE-2014-3506		 CWE-399 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41409 - Missing release of memory after effective lifetime
CVE-2014-3507		 CWE-401 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41410 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3508		 CWE-200 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014080902
and 11 more
#VU41411 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-3509		 CWE-362 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 9 more
#VU41412 - Improper input validation
CVE-2014-3510		 CWE-20 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41413 - Improper input validation
CVE-2014-3511		 CWE-20 Medium
No
No
 1.1.2.7 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more


Showing elements 1 - 20 out of 23