HPE fixes maximum severity remote auth bypass bug in SSMC console

guest · Oct 23, 2020

HPE fixes maximum severity remote auth bypass bug in SSMC console
October 23, 2020
https://www.bleepingcomputer.com/ne...erity-remote-auth-bypass-bug-in-ssmc-console/

Hewlett Packard Enterprise (HPE) has fixed a maximum severity remote authentication bypass vulnerability affecting the company's HPE StoreServ Management Console (SSMC) data center storage management solution.

HPE SSMC is a management and reporting console for HPE Primera (data storage for mission-critical apps) and HPE 3PAR StoreServ systems (AI-powered storage cloud service providers) data center arrays.
Click to expand...

10/10 severity rating
The patched remote authentication bypass vulnerability is tracked as CVE-2020-7197 and it affects HPE 3PAR StoreServ Management and Core Software Media prior to 3.7.0.0.

CVE-2020-7197 was rated by HPE as a maximum severity (10/10) vulnerability that allows threat actors with no privileges to exploit it as part of low complexity attacks that don't require user interaction.

The critical SSMC vulnerability was found and reported by MindPoint Group penetration tester Elwood Buck according to HPE's security advisory.
HPE did not provide any other details on the security flaw's inner-workings or information regarding in the wild attacks exploiting the bug.
Click to expand...

Log in or Sign up

HPE fixes maximum severity remote auth bypass bug in SSMC console

guest Guest

Log in or Sign up

HPE fixes maximum severity remote auth bypass bug in SSMC console

guest Guest

Useful Searches