Lucene search

[email protected]CVE-2017-8959

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-8959

2018-02-1522:29:08

[email protected]

web.nvd.nist.gov

cve-2017-8959

authentication bypass

hpe

msa 1040

msa 2040

san storage

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found.

Affected configurations

NVD

Node

hpmsa_1040_san_storage_firmwareRange≤gl220p008

AND

hpmsa_1040_san_storageMatch-

Node

hpmsa_2040_san_storage_firmwareRange≤gl220p008

AND

hpmsa_2040_san_storageMatch-

CPENameOperatorVersion
hp:msa_1040_san_storage_firmwarehp msa 1040 san storage firmwarelegl220p008

CPE	Name	Operator	Version
hp:msa_1040_san_storage_firmware	hp msa 1040 san storage firmware	le	gl220p008

CNA Affected

[
  {
    "product": "MSA 1040 and 2040 SAN Storage",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "GL220P008 and earlier"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbst03780en_us

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for CVE-2017-8959

cvelist1 nvd1 prion1