Medium severity6.5NVD Advisory· Published Feb 27, 2019· Updated Jun 17, 2026

CVE-2018-1775

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Storwize V3700llm-create2 versions
7.5 - 8.2+ 1 more
- (no CPE)range: 7.5 - 8.2
- (no CPE)range: 7.5
IBM/Spectrum Virtualizellm-fuzzy2 versions
7.5 - 8.2+ 1 more
- (no CPE)range: 7.5 - 8.2
- (no CPE)range: 7.5
IBM/SAN Volume Controllerllm-fuzzy
Range: 7.5 - 8.2
IBM/FlashSystemllm-fuzzy
Range: 7.5 - 8.2
IBM/FlashSystem 9100 Familyv5
Range: 7.5
IBM/Flashsystem V9000 Firmwarecpe-rescue
Range: 7.5
IBM/San Volume Controller Softwarecpe-rescue
Range: 7.5
IBM/Spectrum Virtualize for Public Cloudv5
Range: 7.5
IBM/Storwize V3500cpe-rescue
Range: 7.5
IBM/Storwize V5000cpe-rescue
Range: 7.5
IBM/Storwize V7000cpe-rescue
Range: 7.5

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/107187nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/148757nvdVDB EntryVendor Advisory
www.ibm.com/support/docview.wssnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000