PT-2010-5310 · Hewlett Packard · Hp Storageworks Modular Smart Array P2000 G3

Published 2010-12-17 · Updated 2018-10-10 · CVE-2010-4115

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP StorageWorks Modular Smart Array P2000 G3 firmware versions TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015

Description The issue allows remote attackers to gain privileges due to an undocumented admin account with a default "!admin" password.

Recommendations For firmware versions TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015, change the default "!admin" password of the undocumented admin account to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-4115

Affected Products

Hp Storageworks Modular Smart Array P2000 G3

References · 11

• http://secunia.com/advisories/42583 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=129251637904727&w=2 · Vendor Advisory
• http://vupen.com/english/advisories/2010/3250 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4115 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64125 · Note
• http://securityfocus.com/archive/1/515251/100/0/threaded · Note
• http://securityfocus.com/archive/1/515196/100/0/threaded · Note
• http://securityfocus.com/archive/1/515262/100/0/threaded · Note
• http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html · Note
• http://securityfocus.com/bid/45386 · Note
• http://securitytracker.com/id?1024904 · Note