CVE-2014-2606 Privilege escalation in n/a

Critical 9.0 Published Updated

Remote authenticated users can gain elevated privileges on HP StoreVirtual Storage systems via unspecified vectors.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2014-2606?

CVE-2014-2606 is a critical vulnerability in n/a, published on 16 Jul 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote authenticated users to gain privileges via unknown vectors.

Which versions are affected by CVE-2014-2606?

It affects 10 products.

Products include Hp Storage Management Software, Hp Storevirtual 4130, Hp Storevirtual 4330, Hp Storevirtual 4330fc, Hp Storevirtual 4335, Hp Storevirtual 4530 and 4 more.

How do I fix CVE-2014-2606?

No fix has been published for CVE-2014-2606 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-2606 being exploited?

There is no known exploitation of CVE-2014-2606 in the wild and no public exploit code.

Sources

Also known as GHSA-6vvj-crcq-87rg.

Is CVE-2014-2606 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free