CVE-2014-3019

IBM SAS RAID and Connectivity Module Firmware < 1.3.3.006 - Unauthenticated Remote Access via TELNET

Title source: llm
STIX 2.1

Description

IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/93054

Scores

EPSS 0.0103
EPSS Percentile 60.3%

Details

CWE
CWE-264
Status published
Products (2)
ibm/sas_connectivity_module_firmware < 1.3.3.004
ibm/sas_raid_module_firmware < 1.3.3.004
Published Jan 17, 2015
Tracked Since Feb 18, 2026