CVE-2019-12002
CRITICALHPE MSA 1040/1050/2040/2042/2050/2052 Firmware < GL225P001 - Access Restriction Bypass via Remote Session Reuse
Title source: manualDescription
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us
Scores
CVSS v3
9.8
EPSS
0.0020
EPSS Percentile
41.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (6)
hpe/msa_1040_firmware
< gl225p001
hpe/msa_1050_firmware
< ve270r001-01
hpe/msa_2040_firmware
< gl225p001
hpe/msa_2042_firmware
< gl225p001
hpe/msa_2050_firmware
< vl270r001-01
hpe/msa_2052_firmware
< vl270r001-01
Published
Apr 17, 2020
Tracked Since
Feb 18, 2026