What is CVE-2013-2352?

CVE-2013-2352 is a vulnerability in Dell Poweredge 2950, classified under CWE-255. Published 2013-07-10.

Is CVE-2013-2352 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Dell Poweredge 2950

CVE-2013-2352

LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.

EPSS: 0.039 (89.2th percentile) — read the EPSS interpretation.

Affected products

Dell Poweredge_2950
Hp Dl320s
Hp Lefthand_nsm2060
Hp Lefthand_nsm2060_g2
Hp Lefthand_nsm2120_g2
Hp Lefthand_vsa
Hp P4000_vsa
Hp P4300
Hp P4300_g2
Hp P4500

Weakness classification (CWE)

CWE-255

Public proof-of-concept exploits

technion/lhnskey

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
hp-security-alert@hp.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2013-2352?: CVE-2013-2352 is a vulnerability in Dell Poweredge 2950, classified under CWE-255. Published 2013-07-10.
Is CVE-2013-2352 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.