CVE-2012-4362

2022-10-0316:15:34

mitre

www.cve.org

hp san/iq

hardcoded password

remote access

tcp port 13838

cve-2012-4362

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.8%

JSON

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.

References

www.exploit-db.com/exploits/18893/

www.exploit-db.com/exploits/18901/

www.kb.cert.org/vuls/id/441363