Unscored CVE-2010-4115 EUVD-2010-4091GHSA-35w5-2xwx-jpp4

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undo…

Published Dec 17, 2010 · Updated Aug 7, 2024 · Assigned by hp

Description

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.

References

20101213 hidden admin user on every HP MSA2000 G3 mailing-list
1024904 vdb-entry
SSRT100356 vendor-advisory
ADV-2010-3250 vdb-entry
storageworks-default-account(64125) vdb-entry
20101215 Re: hidden admin user on every HP MSA2000 G3 mailing-list
42583 third-party-advisory
20101213 hidden admin user on every HP MSA2000 G3 mailing-list
45386 vdb-entry
20101213 Re: hidden admin user on every HP MSA2000 G3 mailing-list