← Back

CVE-2021-26588

nvd nist
Published: Oct 11, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An unauthenticated user could remotely exploit the low complexity issue to execute code as administrator. This vulnerability impacts completely the confidentiality, integrity, availability of the array. HPE has made the following software updates and mitigation information to resolve the vulnerability in 3PAR, Primera and Alletra 9000 firmware.

Affected (9)

Hpe
6 products
3par Os
Primera 630 Firmware
Primera 650 Firmware
Primera 670 Firmware
Alletra 9060 Firmware
Alletra 9080 Firmware
Configuration A
4 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Hpe
3par Os
Version 3.3.1_mp5_p156
3par Os
Version 3.3.1_mu1
3par Os
Version 3.3.1_mu2_p157
3par Os
Version 3.3.2_ga_p_01
Running on/withPlatform Versions
Hpe
3par Storeserv 10400
All versions
Hpe
3par Storeserv 10800
All versions
Hpe
3par Storeserv 20000
All versions
Hpe
3par Storeserv 7200c
All versions
Hpe
3par Storeserv 7400c
All versions
Hpe
3par Storeserv 7440c
All versions
Hpe
3par Storeserv 8000
All versions
Hpe
3par Storeserv 9000
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Primera 630 Firmware
From 4.0.0 to 4.3.3
Running on/withPlatform Versions
Hpe
Primera 630
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Primera 650 Firmware
From 4.0.0 to 4.3.3
Running on/withPlatform Versions
Hpe
Primera 650
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Primera 670 Firmware
From 4.0.0 to 4.3.3
Running on/withPlatform Versions
Hpe
Primera 670
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Alletra 9060 Firmware
From 9.3.0 to 9.4.0
Running on/withPlatform Versions
Hpe
Alletra 9060
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Alletra 9080 Firmware
From 9.3.0 to 9.4.0
Running on/withPlatform Versions
Hpe
Alletra 9080
All versions

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.