CVE-2021-26588
Description
A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An unauthenticated user could remotely exploit the low complexity issue to execute code as administrator. This vulnerability impacts completely the confidentiality, integrity, availability of the array. HPE has made the following software updates and mitigation information to resolve the vulnerability in 3PAR, Primera and Alletra 9000 firmware.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe 3par_os | 3.3.1_mp5_p156, 3.3.1_mu1, 3.3.1_mu2_p157, 3.3.2_ga_p_01 | — |
| hpe primera_630_firmware | 4.0.0 ≤ v ≤ 4.3.3 | — |
| hpe primera_650_firmware | 4.0.0 ≤ v ≤ 4.3.3 | — |
| hpe primera_670_firmware | 4.0.0 ≤ v ≤ 4.3.3 | — |
| hpe alletra_9060_firmware | 9.3.0 ≤ v ≤ 9.4.0 | — |
| hpe alletra_9080_firmware | 9.3.0 ≤ v ≤ 9.4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.