PT-2021-17064 · Hewlett Packard · Hpe Primera Storage+2

Published 2021-10-11 · Updated 2021-10-18 · CVE-2021-26588

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE 3PAR StoreServ (affected versions not specified) HPE Primera Storage (affected versions not specified) HPE Alletra 9000 Storage (affected versions not specified)

Description A potential security issue has been identified, allowing an unauthenticated user to remotely exploit a low complexity issue and execute code as administrator. This impacts the confidentiality, integrity, and availability of the array.

Recommendations For HPE 3PAR StoreServ, apply the software updates provided by HPE to resolve the vulnerability. For HPE Primera Storage, apply the software updates provided by HPE to resolve the vulnerability. For HPE Alletra 9000 Storage, apply the software updates provided by HPE to resolve the vulnerability.

Fix

Related Identifiers

CVE-2021-26588

Affected Products

Hpe 3Par Storeserv

Hpe Alletra 9000 Storage

Hpe Primera Storage

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04191en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26588 · Security Note
• https://osv.dev/vulnerability/CVE-2021-26588 · Vendor Advisory
• https://t.me/cibsecurity/30356 · Telegram Post