high7.7Public exploit code
CVE-2012-4361
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)2012-05-21 · remote · hardware · Verified
- HP VSA - Remote Command Execution2012-02-17 · remote · hardware · Verified
Impact
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | San\/Iq | through 9.0 Versions 8.0, 8.1, 8.5 |