CVE-2009-2680

Status: ModifiedHigh (8.5)—

Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors.

CVSS

Version: 2.0
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:C
Base score: 8.5

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 3.22%
Percentile among all scored CVEs: 88
Score date: 10/9/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (4)

HP — Storageworks 1/8 G2 Tape Autoloader HP — Storageworks Msl2024 Tape Library HP — Storageworks Msl4048 Tape Library HP — Storageworks Msl8096 Tape Library

CWEs

NVD-CWE-noinfo

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2009-2680",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:C",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 7.8,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-09-24T16:30:01.453",
  "references": [
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/36764",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1022905",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/58131",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/36388",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/2662",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53237",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/36764",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1022905",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/58131",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/36388",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/2662",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53237",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad no especificada en la Interfaz de Administración Remota (RMI) para MSL Tape Libraries and 1/8 G2 Tape Autoloaders en StorageWorks 1/8 G2 Tape Autoloader versión de firmware 2.30 y anteriores, Tape Library MSL2024 versión de firmware 4.20 y anteriores, MSL4048 Tape Library versión de firmware 6.50 y anteriores, y MSL8096 Tape Library versión de firmware 8.90 y anteriores, de HP, permite a los atacantes remotos causar una denegación de servicio por medio de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:09:59.960",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:storageworks_1\\/8_g2_tape_autoloader:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72CAE62D-B7B1-4DC7-AD10-18B27E68BF9C",
              "versionEndIncluding": "2.30"
            },
            {
              "criteria": "cpe:2.3:h:hp:storageworks_msl2024_tape_library:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BC0783B-0D2A-4BEA-8AC2-D0E23A84A961",
              "versionEndIncluding": "4.20"
            },
            {
              "criteria": "cpe:2.3:h:hp:storageworks_msl4048_tape_library:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B13322F0-91CD-4CC3-A1A7-95E8313679A9",
              "versionEndIncluding": "6.50"
            },
            {
              "criteria": "cpe:2.3:h:hp:storageworks_msl8096_tape_library:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C06FCD7-20FE-423E-83AD-2F36FF1BEEF2",
              "versionEndIncluding": "8.90"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}