Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4841


Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509.


Published

2014-02-26T14:55:08.363

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hp lefthand ≤ 10.5 Yes
Operating System hp lefthand 8.1 Yes
Operating System hp lefthand 8.5 Yes
Operating System hp lefthand 9.0 Yes
Operating System hp lefthand 9.5 Yes
Operating System hp lefthand 10 Yes
Application hp storevirtual_virtual_storage_appliance - Yes
Hardware hp storevirtual_4000 - Yes

References