PT-2025-47207

CVE-2025-36118

·

Published

2025-11-14

·

Updated

2025-12-08

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Storage Virtualize versions 8.4 through 9.1
Description The IKEv1 implementation contains a flaw that could allow remote attackers to obtain sensitive information from device memory during a Security Association (SA) negotiation request.
Recommendations IBM Storage Virtualize version 8.4 should be updated. IBM Storage Virtualize version 8.5 should be updated. IBM Storage Virtualize version 8.7 should be updated. IBM Storage Virtualize version 9.1 should be updated.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-244: Improper Clearing of Heap Memory Before Release (\'Heap Inspection\')
Related identifiers
CVE-2025-36118
BDU:2025-14685
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com