CyberSec.Space Logo
Back to CVE Browser

CVE-2011-4157

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0990%
EPSS Percentile38.52th
PublishedNov 16, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.

Affected Platforms (CPE)

📦
Hp

Centralized Management Console Software

<= 9.0
📦
Hp

Centralized Management Console Software

= 7.0.01
📦
Hp

Centralized Management Console Software

= 8.0
📦
Hp

Centralized Management Console Software

= 8.1
📦
Hp

Centralized Management Console Software

= 8.5
📦
Hp

San\/iq

<= 9.0
📦
Hp

San\/iq

= 8.0
📦
Hp

San\/iq

= 8.1
📦
Hp

San\/iq

= 8.5
🔌
Hp

Storageworks P4000 Virtual San Appliance

All versions

References & Advisories

🔗 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
🔗 http://www.securityfocus.com/bid/47005
🔗 http://www.securityfocus.com/bid/51042
🔗 http://www.zerodayinitiative.com/advisories/ZDI-11-111/
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/71766
🔗 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
🔗 http://www.securityfocus.com/bid/47005
🔗 http://www.securityfocus.com/bid/51042

Related Vulnerabilities

CVE-2012-40925.8

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the ...

CVE-2011-087310.0

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Updat...

CVE-2011-294610.0

Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer...

CVE-2011-349510.0

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to re...