Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4115
HistoryDec 17, 2010 - 7:00 p.m.

CVE-2010-4115

2010-12-1719:00:20
CWE-255
[email protected]
web.nvd.nist.gov
1

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.006

Percentile

79.5%

JSON

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default “!admin” password, which allows remote attackers to gain privileges.

Affected configurations

Nvd
Node
hpstorageworks_modular_smart_array_p2000_g3
AND
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts100p002
OR
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts100r011
OR
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts100r025
OR
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts200r005
OR
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts201r014
OR
hpstorageworks_modular_smart_array_p2000_g3_firmwareMatchts201r015
VendorProductVersionCPE
hpstorageworks_modular_smart_array_p2000_g3*cpe:2.3:h:hp:storageworks_modular_smart_array_p2000_g3:*:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets100p002cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100p002:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets100r011cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r011:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets100r025cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r025:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets200r005cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts200r005:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets201r014cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r014:*:*:*:*:*:*:*
hpstorageworks_modular_smart_array_p2000_g3_firmwarets201r015cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r015:*:*:*:*:*:*:*

Related

cve 1
securityvulns 2
cvelist 1
prion 1
nessus 1
cve
cve
CVE-2010-4115
2010-12-17 19:00:20
securityvulns
securityvulns
HP StorageWorks MSA2000 backdoor account
2010-12-17 00:00:00
[security bulletin] HPSBST02620 SSRT100356 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Unauthorized Access
2010-12-17 00:00:00
cvelist
cvelist
CVE-2010-4115
2010-12-17 18:00:00
prion
prion
Default credentials
2010-12-17 19:00:00
nessus
nessus
HP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials
2010-12-23 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.006

Percentile

79.5%

JSON
Related for NVD:CVE-2010-4115
cve1securityvulns2cvelist1prion1nessus1