CVE-2013-2352: Critical severity HP San\/iq vulnerability
LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2352?
CVE-2013-2352 is considered a moderate severity vulnerability that could allow remote attackers to gain administrative access.
How do I fix CVE-2013-2352?
To mitigate CVE-2013-2352, users should upgrade their HP StoreVirtual Storage devices to a version later than 10.5.
What versions of HP SAN/iQ are affected by CVE-2013-2352?
CVE-2013-2352 affects HP SAN/iQ versions 10.5 and earlier, including 8.0, 8.1, 8.5, 9.0, and 9.5.
Does CVE-2013-2352 affect all HP SAN/iQ devices?
CVE-2013-2352 specifically affects the HP StoreVirtual Storage devices running the vulnerable versions of HP SAN/iQ.
What impact does CVE-2013-2352 have on security?
CVE-2013-2352 can lead to unauthorized administrative access, potentially compromising the affected storage systems.