PT-2010-5310 · Hewlett Packard · Hp Storageworks Modular Smart Array P2000 G3

Publicado 2010-12-17 · Atualizado 2018-10-10 · CVE-2010-4115

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP StorageWorks Modular Smart Array P2000 G3 firmware versions TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015

Description The issue allows remote attackers to gain privileges due to an undocumented admin account with a default "!admin" password.

Recommendations For firmware versions TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015, change the default "!admin" password of the undocumented admin account to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-4115

Produtos afetados

Hp Storageworks Modular Smart Array P2000 G3

Referências · 11

• http://secunia.com/advisories/42583 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=129251637904727&w=2 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64125 · Nota
• http://vupen.com/english/advisories/2010/3250 · Aviso do Fabricante
• http://securityfocus.com/archive/1/515251/100/0/threaded · Nota
• http://securityfocus.com/archive/1/515196/100/0/threaded · Nota
• http://securityfocus.com/archive/1/515262/100/0/threaded · Nota
• http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html · Nota
• http://securityfocus.com/bid/45386 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4115 · Nota de Segurança
• http://securitytracker.com/id?1024904 · Nota