Unscored severity · published Nov 16, 2011
CVE-2011-4157
Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted…
–
CVSS
13.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Centralized Management Console Software · HP
through 9.0; 7.0.01; 8.0; 8.1; 8.5 · source: NVD
SA
San/iq · HP
through 9.0; 8.0; 8.1; 8.5 · source: NVD
SP
Storageworks P4000 Virtual San Appliance · HP
All versions, or not specified · source: NVD
Affected product
CM
Centralized Management Console Software
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4157
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
www.securityfocus.com
http://www.securityfocus.com/bid/47005
www.securityfocus.com
http://www.securityfocus.com/bid/51042
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-11-111/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71766