CVE-2019-12002
Critical
Description
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.
SeverityCritical
CVSS9.8
Exploit probability—
ProductHpe Msa 1040 Firmware
PublishedApr 17, 2020
First seenApr 17, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe msa_1040_firmware | v ≤ gl225p001 | — |
| hpe msa_2040_firmware | v ≤ gl225p001 | — |
| hpe msa_2042_firmware | v ≤ gl225p001 | — |
| hpe msa_1050_firmware | v ≤ ve270r001-01 | — |
| hpe msa_2050_firmware | v ≤ vl270r001-01 | — |
| hpe msa_2052_firmware | v ≤ vl270r001-01 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.