VULNERABILITY INTELLIGENCE

CVE-2013-2352

CVSS score9.4 HIGH
EPSS probability3.91%
CISA KEVNot currently listed
Published2013-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:C/A:C

Description

LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.

Primary references