CVE-2013-2352
9.4
Vector
AV:N/AC:L/Au:N/C:N/I:C/A:C
Exploitability: 10.0 / Impact: 9.2
Source: NVD
Description
LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 10.5 |
| Running on/with | Platform Versions |
|---|---|
Dell Poweredge 2950 | All versions |
Hp Dl320s | All versions |
Hp Lefthand Nsm2060 | All versions |
Hp Lefthand Nsm2060 G2 | All versions |
Hp Lefthand Nsm2120 G2 | All versions |
Hp Lefthand Vsa | All versions |
Hp P4000 Vsa | All versions |
Hp P4300 | All versions |
Hp P4300 G2 | All versions |
Hp P4500 | All versions |
Hp P4500 G2 | All versions |
Hp P4900 G2 | All versions |
Hp Storevirtual 4130 | All versions |
Hp Storevirtual 4330 | All versions |
Hp Storevirtual 4530 | All versions |
Hp Storevirtual 4630 | All versions |
Hp Storevirtual 4730 | All versions |
Hp Storevirtual Vsa | All versions |
Ibm X3650 | All versions |
Related CWEs
References (4)
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.