← CVE Intelligence

CVE-2025-0160

IBM FlashSystem code execution PUBLISHED

Description (CNA)

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.

Affected (CNA)

Vendor / productVersions
IBM / Storage Virtualizeaffected 8.5.0.0 through 8.5.0.13; affected 8.5.1.0; affected 8.5.2.0 through 8.5.2.3; affected 8.5.3.0 through 8.5.3.1; affected 8.5.4.0; affected 8.6.0.0 through 8.6.0.5; affected 8.6.1.0; affected 8.6.2.0 through 8.6.2.1; affected 8.6.3.0; affected 8.7.1.0; affected 8.7.2.0 through 8.7.2.1

CWE

CWE-114

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.