Lucene search

[email protected]CVE-2014-9565

HistorySep 07, 2017 - 8:29 p.m.

CVE-2014-9565

2017-09-0720:29:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2014-9565

ibm

flex system

en6131

40gb ethernet

ib6131

40gb infiniband

switch

firmware

csrf

vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier.

Affected configurations

NVD

Node

ibmib6131_firmwareRange≤3.4.0.0.0.0

AND

ibmib6131Match-

Node

ibmen6131_firmwareRange≤3.4.0.0.0.0

AND

ibmen6131Match-

CPENameOperatorVersion
ibm:ib6131_firmwareibm ib6131 firmwarele3.4.0.0.0.0

CPE	Name	Operator	Version
ibm:ib6131_firmware	ibm ib6131 firmware	le	3.4.0.0.0.0

References

www.securityfocus.com/bid/74930

support.podc.sl.edst.ibm.com/support/home/docdisplay?lndocid=MIGR-5098173

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

Related for CVE-2014-9565

cvelist1 nvd1 prion1 ibm1