CVE-2013-2352

N/A

Published: July 10, 2013 at 10:00 PM UTC

Updated: June 16, 2026 at 11:53 PM UTC

18 products affected across 1 vendorSAN /iqStorevirtual 4530Storevirtual Vsa· also runs on 2 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 4%

Description

LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

SAN /iq · HP

95%

v ≤ 10.510.0 8.0 8.1 8.5 9.0 9.5

dell-poweredge-2950 (environment) · hp-dl320s (environment) · hp-lefthand-nsm2060 (environment) · hp-lefthand-nsm2060-g2 (environment) · hp-lefthand-nsm2120-g2 (environment) · hp-lefthand-vsa (environment) · hp-p4000-vsa (environment) · hp-p4300 (environment) · hp-p4300-g2 (environment) · hp-p4500 (environment) · hp-p4500-g2 (environment) · hp-p4900-g2 (environment) · hp-storevirtual-4130 (environment) · hp-storevirtual-4330 (environment) · hp-storevirtual-4530 (environment) · hp-storevirtual-4630 (environment) · hp-storevirtual-4730 (environment) · hp-storevirtual-vsa (environment) · ibm-x3650 (environment)

Dl320S · HPdevice

80%

All versions

Lefthand Nsm2060 · HPdevice

80%

All versions

Lefthand Nsm2060 G2 · HPdevice

80%

All versions

Lefthand Nsm2120 G2 · HPdevice

80%

All versions