CVE-2018-1775
Estado: ModificadaMedia (6.5)—
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.92%
- Percentil entre todas las CVEs puntuadas: 79
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-200
Referencias
- http://www.securityfocus.com/bid/107187
- https://exchange.xforce.ibmcloud.com/vulnerabilities/148757
- https://www.ibm.com/support/docview.wss?uid=ibm10872486
- http://www.securityfocus.com/bid/107187
- https://exchange.xforce.ibmcloud.com/vulnerabilities/148757
- https://www.ibm.com/support/docview.wss?uid=ibm10872486
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-1775",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "torwize V7000",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "torwize V3500",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "torwize V3700",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "Spectrum Virtualize for Public Cloud",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "Spectrum Virtualize Software",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "SAN Volume Controller",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "FlashSystem V9000",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "torwize V5000",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
},
{
"vendor": "IBM",
"product": "FlashSystem 9100 Family",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "8.2"
}
]
}
]
}
],
"published": "2019-02-27T22:29:00.380",
"references": [
{
"url": "http://www.securityfocus.com/bid/107187",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148757",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10872486",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/107187",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148757",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10872486",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757."
},
{
"lang": "es",
"value": "Los productos de IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize y IBM FlashSystem, en sus versiones desde la 7.5 hasta la 8.2, podrían permitir a un atacante autenticado descargar archivos arbitrarios desde el sistema operativo. IBM X-Force ID: 148757."
}
],
"lastModified": "2026-06-17T01:51:45.117",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:spectrum_virtualize_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF325635-CFE5-4BB8-8A9A-1942E441E70A",
"versionEndIncluding": "8.2",
"versionStartIncluding": "7.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:flashsystem_v9000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB9C13EA-8C4C-42C5-A451-611FF0904AE8"
},
{
"criteria": "cpe:2.3:h:ibm:flashsystem_v9100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7C9885F2-D9C5-4F91-8BCE-60684AFFC789"
},
{
"criteria": "cpe:2.3:h:ibm:san_volume_controller:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D5D84487-CEBA-48A0-9B15-A0300D992E3D"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7352FACE-C8D0-49A7-A2D7-B755599F0FB3"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v3700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49318A1D-49F6-4CA7-AE31-0EB4B3790CBB"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AA2ED020-4C7B-4303-ABE6-74D46D127556"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:spectrum_virtualize_software_for_public_cloud:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16DB16EC-035E-4C24-8CD5-7E5E49973C8D",
"versionEndIncluding": "8.2",
"versionStartIncluding": "7.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:flashsystem_v9000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB9C13EA-8C4C-42C5-A451-611FF0904AE8"
},
{
"criteria": "cpe:2.3:h:ibm:flashsystem_v9100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7C9885F2-D9C5-4F91-8BCE-60684AFFC789"
},
{
"criteria": "cpe:2.3:h:ibm:san_volume_controller:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D5D84487-CEBA-48A0-9B15-A0300D992E3D"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7352FACE-C8D0-49A7-A2D7-B755599F0FB3"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v3700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49318A1D-49F6-4CA7-AE31-0EB4B3790CBB"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD"
},
{
"criteria": "cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AA2ED020-4C7B-4303-ABE6-74D46D127556"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}