medium4.0Public exploit code
CVE-2012-4362
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)2012-05-21 · remote · hardware · Verified
- HP VSA - Remote Command Execution2012-02-17 · remote · hardware · Verified
Impact
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | San\/Iq | Version 9.5 |