PT-2013-3686 · Hewlett Packard · Hp Lefthand Virtual San Appliance

Published 2013-07-02 · Updated 2019-10-09 · CVE-2013-2343

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP LeftHand Virtual SAN Appliance hydra versions prior to 10.0

Description The issue allows remote attackers to execute arbitrary code via unknown vectors.

Recommendations For versions prior to 10.0, update to version 10.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2013-2343

ZDI-13-179

Affected Products

Hp Lefthand Virtual San Appliance

References · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hp_vsa_login_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/27555 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2343 · Security Note
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-179 · Security Note