Vulnerability Details : CVE-2010-4115
HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.
Exploit prediction scoring system (EPSS) score for CVE-2010-4115
Probability of exploitation activity in the next 30 days: 0.65%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-4115
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST |
CWE ids for CVE-2010-4115
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-4115
-
http://www.securitytracker.com/id?1024904
HP StorageWorks Modular Smart Array Default Administrative Password Lets Remote Users Gain Administrative Access - SecurityTracker
-
http://www.securityfocus.com/bid/45386
HP StorageWorks Hidden Admin User Unauthorized Access Vulnerability
-
http://www.vupen.com/english/advisories/2010/3250
Webmail | OVH- OVHVendor Advisory
-
http://marc.info/?l=bugtraq&m=129251637904727&w=2
'[security bulletin] HPSBST02620 SSRT100356 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Rem' - MARCVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/64125
HP StorageWorks Modular Smart Array P2000 default account CVE-2010-4115 Vulnerability Report
-
http://www.securityfocus.com/archive/1/515251/100/0/threaded
SecurityFocus
-
http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html
-
http://www.securityfocus.com/archive/1/515196/100/0/threaded
SecurityFocus
-
http://www.securityfocus.com/archive/1/515262/100/0/threaded
SecurityFocus
Products affected by CVE-2010-4115
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r025:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100p002:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts200r005:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r014:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r015:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3
- cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r011:*:*:*:*:*:*:*When used together with: HP » Storageworks Modular Smart Array P2000 G3