« Volver al listado

CVE-2010-4115

Estado: ModificadaAlta (9)—

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Storageworks Modular Smart Array P2000 G3 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4115",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-12-17T19:00:20.963",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=129251637904727&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/42583",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515196/100/0/threaded",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515251/100/0/threaded",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515262/100/0/threaded",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/45386",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1024904",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/3250",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64125",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=129251637904727&w=2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/42583",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515196/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515251/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515262/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/45386",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1024904",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/3250",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64125",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default \"!admin\" password, which allows remote attackers to gain privileges."
    },
    {
      "lang": "es",
      "value": "El firmware HP StorageWorks Modular Smart Array firmware P2000 G3 TS100R011, TS100R025, TS100P002, TS200R005, TS201R014 y TS201R015 instala una cuenta de administrador indocumentada con un defecto \"!admin\", contraseña, que permite a atacantes remotos obtener privilegios."
    }
  ],
  "lastModified": "2026-06-16T23:24:10.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:storageworks_modular_smart_array_p2000_g3:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0654E285-3E7E-4DA3-A0AF-55B5EC4B4346"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100p002:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBF57B45-1C10-43D4-BB3A-CC6EF58E2B30"
            },
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r011:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16294B03-4806-405F-8E50-5ECA9FD8F3B0"
            },
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts100r025:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02838E38-3C7E-4B45-A717-9D1122E1F7BF"
            },
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts200r005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD1EE7ED-3E09-46F0-B02D-C5114A70E8DD"
            },
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r014:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BF2FC7D-1E82-44CE-90E7-FACDF7681AC4"
            },
            {
              "criteria": "cpe:2.3:a:hp:storageworks_modular_smart_array_p2000_g3_firmware:ts201r015:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF408D30-8F92-4ABA-8AB4-7A88ED2C0D6F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}