CVE-2023-30910 - OpenCVE

HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Hpe	Msa 1060 Storage Firmware Msa 2062 Storage Msa 1060 Storage Msa 2060 Storage Msa 2062 Storage Firmware Msa 2060 Storage Firmware

Configuration 1 [-]

AND

cpe:2.3:o:hpe:msa_1060_storage_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hpe:msa_1060_storage:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hpe:msa_2060_storage_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hpe:msa_2060_storage:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:hpe:msa_2062_storage_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hpe:msa_2062_storage:-:*:*:*:*:*:*:*

References

Link	Resource
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbst04539en_us	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: hpe

Published: 2023-10-09T15:04:35.757Z

Updated: 2023-10-09T15:10:09.082Z

Reserved: 2023-04-20T16:58:53.926Z

Link: CVE-2023-30910

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-10-09T16:15:10.400

Modified: 2023-10-13T18:42:35.140

Link: CVE-2023-30910

JSON object: View

Redhat Information

No data.

CWE

CWE-444

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:msa_1060_storage_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D619F85-D2AF-4C55-9987-74A25CF5F91A", "versionEndExcluding": "in210r004", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hpe:msa_1060_storage:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8807E1F-5159-4AEA-BBF5-05BA6FBC394F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:msa_2060_storage_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "153B35B4-02A3-4E45-B825-B059FE41249B", "versionEndExcluding": "in210r004", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hpe:msa_2060_storage:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F26FD92-05CA-460D-BCD0-D71626E1E594", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:msa_2062_storage_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6B8F8D94-8EFA-48BE-937E-D82C449DFF3D", "versionEndExcluding": "in210r004", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hpe:msa_2062_storage:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EAA9E7-F3E9-4778-ACBC-DD801586FCC7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "HPE MSA Controller prior to version\u00a0IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.\u00a0"}, {"lang": "es", "value": "HPE MSA Controller anterior a la versi\u00f3n IN210R004 podr\u00eda explotarse de forma remota para permitir una interpretaci\u00f3n inconsistente de las solicitudes HTTP."}], "id": "CVE-2023-30910", "lastModified": "2023-10-13T18:42:35.140", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "security-alert@hpe.com", "type": "Secondary"}]}, "published": "2023-10-09T16:15:10.400", "references": [{"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbst04539en_us"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-444"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-444"}], "source": "security-alert@hpe.com", "type": "Secondary"}]}