Vulnerability in HP 8\/20q Fibre Channel Switch 16 Port
CVE-2014-2603
Unspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Connection Kit with firmware before 8.0.14.08.00 allows remote authenticated users to obtain sensitive information via unknown vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 1.7 (Low). Vector: AV:N/AC:H/Au:M/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.012 (67.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 67th percentile — 67.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- HP 8\/20q Fibre Channel Switch 16 Port — versions ak242a, ak242b
- HP 8\/20q Fibre Channel Switch 8 Port — versions aq233a, aq233b
- HP 8gb Simple San Connection Kit — versions ak241a, ak241b
- HP H-Series Fibre Channel Switch Firmware
- HP Sn6000 Stackable 8gb 12-Port Single Power Fibre Channel Switch — versions bk780a, bk780b
- HP Sn6000 Stackable 8gb 24-Port Dual Power Fibre Channel Switch — versions aw576a, aw576b
- HP Sn6000 Stackable 8gb 24-Port Single Power Fibre Channel Switch — versions aw575a, aw575b
References
- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay (Vendor Advisory, vendor-advisory)