Vulnerabilities > CVE-2010-4115 - Credentials Management vulnerability in HP Storageworks Modular Smart Array P2000 G3 Firmware

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
hp
CWE-255
nessus
NVD
Published: 2010-12-17
Updated: 2024-11-21

Summary

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.

Vulnerable Configurations

Part Description Count
Hardware
Hp
1
Application
Hp
6

Common Weakness Enumeration (CWE)

Nessus

NASL familyGain a shell remotely
NASL idHP_STORAGEWORKS_ADMIN_DEFAULT_CREDS.NASL
descriptionThe remote device appears to be a HP StorageWorks MSA P2000 series. There is a hidden, undocumented account named
last seen2020-06-01
modified2020-06-02
plugin id51369
published2010-12-23
reporterThis script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/51369
titleHP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials

References