Vulnerability Details : CVE-2013-2343
Public exploit exists!
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.
Vulnerability category: Execute code
Exploit prediction scoring system (EPSS) score for CVE-2013-2343
Probability of exploitation activity in the next 30 days: 77.62%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2013-2343
-
HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow
Disclosure Date: 2013-06-28First seen: 2020-04-26exploit/linux/misc/hp_vsa_login_bofThis module exploits a buffer overflow vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 10.0. The vulnerability is due to an insecure usage of the sscanf() function when parsing login requests. This module has been tested successfully on the HP
CVSS scores for CVE-2013-2343
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2013-2343
-
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318
HP Support for Technical Help and Troubleshooting | HP® Customer Service.Vendor Advisory
Products affected by CVE-2013-2343
- cpe:2.3:a:hp:lefthand_p4000_virtual_san_appliance:-:*:*:*:*:*:*:*
- cpe:2.3:a:hp:lefthand_virtual_san_appliance_hydra:-:*:*:*:*:*:*:*
- cpe:2.3:a:hp:lefthand_virtual_san_appliance_hydra_software:*:*:*:*:*:*:*:*