CVE-2010-4115 HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, whic...
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts100p002 | No fix listed |
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts100r011 | No fix listed |
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts100r025 | No fix listed |
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts200r005 | No fix listed |
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts201r014 | No fix listed |
| HP Inc storageworks modular smart array p2000 g3 firmware | = ts201r015 | No fix listed |
References
- 20101213 hidden admin user on every HP MSA2000 G3 mailing-list
- SSRT100356 vendor-advisory
- 42583 third-party-advisory vendor-advisory
- 20101213 hidden admin user on every HP MSA2000 G3 mailing-list
- 20101213 Re: hidden admin user on every HP MSA2000 G3 mailing-list
- 20101215 Re: hidden admin user on every HP MSA2000 G3 mailing-list
- 45386 vdb-entry
- 1024904 vdb-entry
- ADV-2010-3250 vdb-entry vendor-advisory
- storageworks-default-account(64125) vdb-entry