Unscored severity · published Aug 20, 2012
CVE-2012-4361
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the…
–
CVSS
47.8%
EPSS
No
On KEV
Description
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)47.8% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
San/iq · HP
through 9.0; 8.0; 8.1; 8.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4361
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4361
Exploit
http://www.exploit-db.com/exploits/18893/
Exploit
http://www.exploit-db.com/exploits/18901/
US Government Resource
http://www.kb.cert.org/vuls/id/441363
More from San/iq
–
CVE-2013-2352
LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which…
–
CVE-2012-3285
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka…
–
CVE-2012-3284
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka…
–
CVE-2012-3283
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka…
–
CVE-2012-3282
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka…