CVE-2019-11993

🗓️ 03 Jan 2020 17:18:03Reported by hpeType

A security vulnerability in HPE SimpliVity nodes allows remote attackers to create or delete arbitrary files via now deprecated APIs. Upgrade to OmniStack 3.7.10 or implement temporary workaround

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-11993	19 Mar 202411:11	–	circl
CNVD	Unspecified Vulnerability in Multiple HPE Products	7 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-11993	3 Jan 202017:18	–	cvelist
EUVD	EUVD-2019-3649	7 Oct 202500:30	–	euvd
NVD	CVE-2019-11993	3 Jan 202018:15	–	nvd
OSV	CVE-2019-11993	3 Jan 202018:15	–	osv
Prion	Design/Logic Flaw	3 Jan 202018:15	–	prion
RedhatCVE	CVE-2019-11993	9 Jan 202610:12	–	redhatcve

NVD

Node

hp simplivity_380_gen9_firmwareRange3.6.2–3.7.9

AND

hp simplivity_380_gen9Match-

Node

hp simplivity_380_gen10_g_firmwareRange3.7.8–3.7.9

AND

hp simplivity_380_gen10_gMatch-

Node

hp simplivity_380_gen10_firmwareRange3.7.1–3.7.9

AND

hp simplivity_380_gen10Match-

Node

hp simplivity_2600_gen10_firmwareRange3.7.5–3.7.9

AND

hp simplivity_2600_gen10Match-

Node

hp simplivity_omnicube_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnicubeMatch-

Node

hp simplivity_omnistack_for_dell_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_dellMatch-

Node

hp simplivity_omnistack_for_cisco_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_ciscoMatch-

Node

hp simplivity_omnistack_for_lenovo_firmwareRange3.0.8–3.7.9

AND

hp simplivity_omnistack_for_lenovoMatch-

[
  {
    "product": "SimpliVity OmniCube; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; SimpliVity OmniStack for Lenovo; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; HPE SimpliVity 2600 Gen10",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "releases from 3.0.8 to 3.7.9"
      },
      {
        "status": "affected",
        "version": "releases from 3.6.2 to 3.7.9"
      },
      {
        "status": "affected",
        "version": "releases from 3.7.1 to 3.7.9"
      },
      {
        "status": "affected",
        "version": "releases from 3.7.8 to 3.7.9"
      },
      {
        "status": "affected",
        "version": "releases from 3.7.5 to 3.7.9"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 04:22Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

CVSS 29.4

EPSS0.00678