CVE-2023-30910

Medium

Description

HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests. 

SeverityMedium
CVSS5.4
Exploit probability28. percentile0.3%
ProductHpe Msa 1060 Storage Firmware
PublishedOct 9, 2023
First seenOct 9, 2023
Weakness typeCWE-444CWE-444

How to fix

Update
  • hpe msa_1060_storage_firmwarein210r004 or later
  • hpe msa_2060_storage_firmwarein210r004 or later
  • hpe msa_2062_storage_firmwarein210r004 or later

Affected products

ProductAffected versionsFixed in
hpe msa_1060_storage_firmwarev < in210r004in210r004
hpe msa_2060_storage_firmwarev < in210r004in210r004
hpe msa_2062_storage_firmwarev < in210r004in210r004

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.