CVE-2025-36118

IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@us.ibm.com

Published

2025-11-17

Last modified

2026-10-07

Weaknesses

CWE-244

Affected products

• Storage Virtualize (Ibm)

References

• https://www.ibm.com/support/pages/node/7250954