ZDI-25-316: Hewlett Packard Enterprise StoreOnce VSA Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise StoreOnce VSA. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-37093.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-316?
The severity of ZDI-25-316 is rated 9.8 on the CVSS scale, indicating critical vulnerability.
What does ZDI-25-316 allow attackers to do?
ZDI-25-316 allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise StoreOnce VSA.
Is authentication required to exploit ZDI-25-316?
No, authentication is not required to exploit the ZDI-25-316 vulnerability.
What is the affected software for ZDI-25-316?
The affected software for ZDI-25-316 is Hewlett Packard Enterprise StoreOnce VSA.
How can I protect my systems from ZDI-25-316?
To protect your systems from ZDI-25-316, it is recommended to apply the latest security patches provided by Hewlett Packard Enterprise.