Threat Investigation
Request a demo

CVE-2021-29873

High

Description

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.

SeverityHigh
CVSS8.1
Exploit probability—
ProductIbm Spectrum Virtualize
PublishedOct 21, 2021
First seenOct 21, 2021

How to fix

Update
  • ibm spectrum_virtualize8.4.0.0 or later
  • ibm spectrum_virtualize_for_public_cloud8.4.0.0 or later
  • ibm storwize_v3500_software8.4.0.0 or later
  • ibm storwize_v3700_software8.4.0.0 or later
  • ibm storwize_v5000_software8.4.0.0 or later
  • ibm storwize_v5100_software8.4.0.0 or later
  • ibm storwize_v7000_software8.4.0.0 or later
  • ibm san_volume_controller_firmware8.4.0.0 or later
  • ibm flashsystem_9100_firmware8.4.0.0 or later
  • ibm flashsystem_9000_firmware8.4.0.0 or later

Affected products

ProductAffected versionsFixed in
ibm spectrum_virtualize7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm spectrum_virtualize_for_public_cloud7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm storwize_v3500_software7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm storwize_v3700_software7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm storwize_v5000_software7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm storwize_v5100_software7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm storwize_v7000_software7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm san_volume_controller_firmware7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm flashsystem_9100_firmware7.8.0.0 ≤ v < 8.4.0.08.4.0.0
ibm flashsystem_9000_firmware7.8.0.0 ≤ v < 8.4.0.08.4.0.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.