Skip to main content

Storage Virtualize CVE-2023-43042

HIGH
Use of Default Password (CWE-1393)
2023-12-14 psirt@us.ibm.com
Information Disclosure IBM Storage Virtualize
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 14, 2023 - 01:15 nvd
HIGH 7.5

DescriptionNVD

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874.

AnalysisAI

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1393. IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874. Affected products include: Ibm Storage Virtualize.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Storage Virtualize

View all
CVE-2025-0159 CRITICAL
9.1 Feb 28

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5
CVE-2025-0160 HIGH
8.1 Feb 28

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5
CVE-2025-1351 MEDIUM
6.7 Jul 07

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another use
CVE-2024-39723 MEDIUM
4.6 Jul 08

IBM FlashSystem 5300 USB ports may be usable even if the port has been disabled by the administrator. Rated medium sever
CVE-2025-36118 HIGH
7.5 Nov 17

IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive informati
CVE-2025-36120 HIGH
8.8 Aug 18

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH s

Same weakness CWE-1393 – Use of Default Password

View all
CVE-2025-26793 CRITICAL POC
9.3
CVE-2025-22938 CRITICAL POC
9.8
CVE-2024-48987 MEDIUM POC
6.6
CVE-2025-26701 CRITICAL
10.0
CVE-2025-27690 CRITICAL
9.8
CVE-2026-5269 CRITICAL
9.8
CVE-2026-24429 CRITICAL
9.8
CVE-2025-66050 CRITICAL
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-43042 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy