CVE-2013-2343

Currently unrated

Key Information:

Vendor
HP
Status
Lefthand Virtual San Appliance Hydra
Lefthand P4000 Virtual San Appliance
Lefthand Virtual San Appliance Hydra Software
Vendor
CVE Published:
2 July 2013

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 95%

Summary

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2013-2343
Created by Rapid7

References

https://h20566.www2.hp.com/portal/site/hpsc/public/kb/doc...
vendor-advisoryx_refsource_HP
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/doc...
vendor-advisoryx_refsource_HP

EPSS Score

95% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.