CVE-2025-36118

Katalog CVE

CVSS 7.5 · High EPSS 0,36%

Kerentanan Improper Clearing of Heap Memory Before Release ('Heap Inspection') pada ibm storage virtualize. Skor CVSS 3.1 7.5 (High) menurut us.ibm.com.

Deskripsi (NVD)

IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.

Rincian

Terbit di NVD

17 November 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 28,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7250954 advisory vendor