CVE-2018-7096

CRITICAL

3PAR Service Processor <SP-4.4.0.GA-110 - RCE

Title source: llm
STIX 2.1

Description

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution.

Scores

CVSS v3 9.8
EPSS 0.0321
EPSS Percentile 87.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (3)
hp/3par_service_provider sp-4.2.0 ga
hp/3par_service_provider sp-4.3.0 ga-17 (2 CPE variants)
hp/3par_service_provider sp-4.4.0 ga-22 (6 CPE variants)
Published Aug 14, 2018
Tracked Since Feb 18, 2026