Medium severity · published Dec 19, 2024
CVE-2024-54009
Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited to allow disclosure of information
4.0
CVSS
0.2%
EPSS
No
On KEV
Description
Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited to allow disclosure of information.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
HPE Alletra Storage MP B10000 · Hewlett Packard Enterprise (HPE)
before 10.4.5 · source: vendor
Affected product
HA
HPE Alletra Storage MP B10000
Hewlett Packard Enterprise (HPE)