CVE-2025-0160

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.
References
Link Resource
https://www.ibm.com/support/pages/node/7184182 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.1:*:*:*:*:*:*:*

History

18 Aug 2025, 18:21

Type Values Removed Values Added
First Time Ibm storage Virtualize
Ibm
CPE cpe:2.3:a:ibm:storage_virtualize:8.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.1.0:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7184182 - () https://www.ibm.com/support/pages/node/7184182 - Vendor Advisory
Summary
  • (es) IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 a 8.5.0.13, 8.5.1.0, 8.5.2.0 a 8.5.2.3, 8.5.3.0 a 8.5.3.1, 8.5.4.0, 8.6.0.0 a 8.6.0.5, 8.6.1.0, 8.6.2.0 a 8.6.2.1, 8.6.3.0, 8.7.0.0 a 8.7.0.2, 8.7.1.0, 8.7.2.0 a 8.7.2.1) podría permitir que un atacante remoto con acceso al sistema ejecute código Java arbitrario debido a restricciones inadecuadas en el servicio RPCAdapter.
CWE NVD-CWE-noinfo

28 Feb 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-28 19:15

Updated : 2025-08-18 18:21


NVD link : CVE-2025-0160

Mitre link : CVE-2025-0160

CVE.ORG link : CVE-2025-0160


JSON object : View

Products Affected

ibm

  • storage_virtualize
CWE
CWE-114

Process Control

NVD-CWE-noinfo