← back
CVE-2020-4756

CVE-2020-4756

CVSS 6.2 MEDIUMEPSS 0.3%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599.
CVSS:3.0/A:H/C:N/PR:N/UI:N/S:U/I:N/AC:L/AV:L/RL:O/RC:C/E:U
Affected products
IBM · Elastic Storage ServerIBM · Spectrum Scale
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/188599https://www.ibm.com/support/pages/node/6349469https://www.ibm.com/support/pages/node/6349475